{"vulnerability": "cve-2026-4550", "sightings": [{"uuid": "f8733190-ef91-4341-b44f-0d94ce3b58ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2le5ume22o", "content": "Microsoft Exchange\u306eSSRF\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u6a29\u9650\u306e\u4f4e\u3044\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308b\u3053\u3068\u304c\u53ef\u80fd\u306b\u306a\u308b\n\nMicrosoft Exchange\u306b\u65b0\u305f\u306b\u767a\u898b\u3055\u308c\u305f\u8106\u5f31\u6027\uff08CVE-2026-45504\u3001CVSS\u30b9\u30b3\u30a2\uff1a8.8\uff09\u306f\u3001\u91cd\u5927\u306a\u30b5\u30fc\u30d0\u30fc\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u306e\u8106\u5f31\u6027\u3092\u9732\u5448\u3059\u308b\u3082\u306e\u3067\u3059\u3002\n\n\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u6a29\u9650\u306e\u4f4e\u3044\u30e6\u30fc\u30b6\u30fc\u304c\u3001\u8106\u5f31\u306aExchange\u30b5\u30fc\u30d0\u30fc\u4e0a\u306e\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3066\u8aad\u307f\u53d6\u308b\u3053\u3068\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u3001HawkTrace\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u3067\u3042\u308bBatuhan Er\u6c0f\u306b\u3088\u3063\u3066\u767a\u898b\u3055\u308c\u3001Microsoft Exc...", "creation_timestamp": "2026-08-01T23:04:41.696300Z"}, {"uuid": "b9a08457-2904-4dac-afc6-d00495c1e2cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45505", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn65vavml32u", "content": "CVE-2026-45505: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass", "creation_timestamp": "2026-05-31T18:08:19.609012Z"}, {"uuid": "91a34c4b-211a-41c2-864a-65d00c54fa79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45505", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mnu2c52rmj2v", "content": "\ud83d\udea8 CVE-2026-45505: Krytyczna luka RCE w Apache ActiveMQ\n\nNowa luka w Apache ActiveMQ omija wcze\u015bniejsze poprawki, pozwalaj\u0105c uwierzytelnionemu atakuj\u0105cemu na zdalne wykonanie kodu. Problem dotyczy\n\nhttps://cyberowi.pl/cve-2026-45505-krytyczna-luka-rce-w-apache-activemq/\n\n#cyberbezpieczenstwo", "creation_timestamp": "2026-06-09T11:02:30.722772Z"}, {"uuid": "6d178cd9-cf62-4a03-9554-895347fb03bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45500", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "b56d9abe-905a-46b1-af90-9fab8ac88c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45501", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "919f919a-5bbc-42c0-8b7d-60d46fd649c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "b563b469-56c9-4f17-b48e-2f22c31fb133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45502", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "cab1d7f1-0717-4bac-a9c6-9314ceec5f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45503", "type": "seen", "source": "https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review", "content": "I\u2019ve made it through Pwn2Own Berlin, had a little vacation, and now I\u2019m back for Patch Tuesday. Microsoft and Adobe didn\u2019t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for June 2026\nFor May, June released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n<colgroup>\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n  <col />\n</colgroup>\n\n<tfoot>\n  \n</tfoot>\n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-66\n    Adobe Campaign Classic\n    2\n    Critical\n    10.0\n    No\n    1\n  \n  \n    APSB26-64\n    Adobe ColdFusion\n    7\n    Critical\n    9.6\n    No\n    1\n  \n  \n    APSB26-63\n    Adobe Acrobat Reader\n    20\n    Critical\n    7.8\n    No\n    2\n  \n  \n    APSB26-57\n    Adobe Experience Manager Forms\n    3\n    Critical\n    9.3\n    No\n    2\n  \n  \n    APSB26-62\n    Adobe Dreamweaver\n    5\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-65\n    Adobe Format Plugins\n    2\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-59\n    Adobe InCopy\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-58\n    Adobe InDesign\n    12\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-60\n    Adobe Substance 3D Sampler\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-61\n    Content Credentials SDK\n    8\n    Critical\n    7.5\n    No\n    3\n  \n  \n    APSB26-56\n    Adobe Experience Manager\n    57\n    Important\n    5.4\n    No\n    3\n  \n\n    TOTAL\n    11 bulletins\n    123\n    \n    \n    \n    \n  \n\n\n\n  \n\n\n\n\n  \nObviously, the update for Campaign Classic should be on the top of your deployment list if you\u2019re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it\u2019s mostly just cross-site scripting (XSS) bugs.\nMicrosoft Patches for June 2026\nThis month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that\u2019s my count. Microsoft\u2019s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.\nOne of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.\nI\u2019ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW \u2013 just a note \u2013 the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.\nOne of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let\u2019s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.\n-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege VulnerabilitySince Microsoft doesn\u2019t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won\u2019t need to take action as Defender updates itself. However, if you don\u2019t have this configured or are in an isolated environment, you\u2019ll need to update to the latest version.\n-    CVE-2026-45657 - Windows Kernel Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup \u2013 this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as \u201cExploitation Less Likely\u201d by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.\n-    CVE-2026-47291 - HTTP.sys Remote Code Execution VulnerabilityOur second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as \u201cExploitation more likely\u201d, so I would definitely check your registry settings.\n-    CVE-2026-44815 - DHCP Client Service Remote Code Execution VulnerabilityHere\u2019s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an \u201cauthenticated\u201d user. I would err on the side of caution here and believe the CVSS. If that\u2019s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it\u2019s a juicy target. This is another one to test and deploy with haste.\n-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass VulnerabilityIf you\u2019ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for \u201cYellowKey\u201d, while the other appears to be a fix for \u201cGreenPlasma\u201d. The researcher has promised a \u201cbone shattering\u201d drop on June 14, so let\u2019s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.\n Here\u2019s the full list of CVEs released by Microsoft for June 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n <col width=\"144\" />\n <col width=\"256\" />\n <col span=\"6\" width=\"104\" />\n \n\n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  XI\n  Type\n \n \n  <span>CVE-2026-41091</span>\n  Microsoft Defender\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  Yes\n  0\n  EoP\n \n \n  <span>CVE-2026-49160</span>\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  Yes\n  No\n  1\n  DoS\n \n \n  <span>CVE-2026-50507</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.8\n  Yes\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45586</span>\n  Windows Collaborative\n  Translation Framework (CTFMON) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  1\n  EoP\n \n \n  <span>CVE-2025-10263 *</span>\n  ARM: CVE-2025-10263\n  Completion of affected memory accesses might not be guaranteed by completion\n  of a TLBI [kernel]\n  Critical\n  9.3\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48567</span>\n  Azure HorizonDB<span>  </span>Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  N/A\n  EoP\n \n \n  <span>CVE-2026-32193</span>\n  Azure Kubernetes\n  Service (AKS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-47644</span>\n  Copilot Chat\n  (Microsoft Edge) Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44815</span>\n  DHCP Client Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47291</span>\n  HTTP.sys Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-42824</span>\n  M365 Copilot\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45476</span>\n  Microsoft Azure\n  Network Adapter Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44810</span>\n  Microsoft\n  Cryptographic Services Elevation of Privilege Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48579</span>\n  Microsoft Exchange\n  Online Information Disclosure Vulnerability\n  Critical\n  9.1\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-47655</span>\n  Microsoft Graph\n  Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  N/A\n  Info\n \n \n  <span>CVE-2026-45497</span>\n  Microsoft M365 Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  7.7\n  No\n  No\n  N/A\n  RCE\n \n \n  <span>CVE-2026-45460</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Critical\n  4.7\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45472</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45474</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45461</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45463</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45456</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45458</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47635</span>\n  Microsoft Outlook and\n  Word Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-26142</span>\n  Nuance PowerScribe\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47289</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47654</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-48563</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42992</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44799</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44801</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42985</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45648</span>\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42987</span>\n  Windows Deployment\n  Services (WDS) Remote Code Execution\n  Critical\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-33828</span>\n  Windows Device Health\n  Attestation (DHA) Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-44803</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-44812</span>\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  1\n  RCE\n \n \n  <span>CVE-2026-45607</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45641</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47652</span>\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.2\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47288</span>\n  Windows Kerberos Key\n  Distribution Center (KDC) Remote Code Execution\n  Critical\n  7.1\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-45657</span>\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48574</span>\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45490</span>\n  .NET SDK Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45491</span>\n  .NET Tampering\n  Vulnerability\n  Important\n  6.2\n  No\n  No\n  3\n  Tampering\n \n \n  <span>CVE-2026-45591</span>\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-47643</span>\n  Azure Stack Edge\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-41098</span>\n  Azure Stack Edge\n  Spoofing Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45642</span>\n  Microsoft Azure\n  Attestation service and Device Health Attestation Service Spoofing\n  Vulnerability\n  Important\n  3.9\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45650</span>\n  Microsoft Bing Search\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45637</span>\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45647</span>\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40371</span>\n  Microsoft Dynamics 365\n  (on-premises) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44822</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45455</span>\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45469</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44817</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-44818</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44820</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44823</span>\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45459</span>\n  Microsoft Excel\n  Security Feature Bypass Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45504</span>\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45502</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45503</span>\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45583</span>\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45500</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45501</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47631</span>\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42986</span>\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-41092</span>\n  Microsoft Kinect\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45644</span>\n  Microsoft Live Share\n  Canvas SDK Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47293</span>\n  Microsoft Office\n  Click-To-Run Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45485</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44821</span>\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45483</span>\n  Microsoft Office\n  Project Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45475</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44819</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-44824</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45645</span>\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-49161</span>\n  Microsoft PC Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  SFB\n \n \n  <span>CVE-2026-42902</span>\n  Microsoft PowerToys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45484</span>\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45454</span>\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-47298</span>\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45467</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45468</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45479</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45453</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47636</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47637</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47638</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47639</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47641</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-33113</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45462</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45464</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-45465</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-47634</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-47640</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-45481</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48560</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-48562</span>\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  2\n  Spoofing\n \n \n  <span>CVE-2026-42835</span>\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45606</span>\n  Microsoft UxTheme\n  Library (uxtheme.dll) Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-45482</span>\n  Microsoft Visual\n  Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability\n  Important\n  8.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45466</span>\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45471</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45486</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45643</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45457</span>\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42980</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-42916</span>\n  NT OS Kernel Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45649</span>\n  Office for Android\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  3\n  Spoofing\n \n \n  <span>CVE-2026-47653</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42909</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42913</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  3\n  RCE\n \n \n  <span>CVE-2026-42993</span>\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45588</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48568</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48570</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48573</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48575</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48576</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-48578</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45654</span>\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45656</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-8863</span>\n  UEFI Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-40376</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47281</span>\n  Visual Studio Code\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-47284</span>\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47292</span>\n  Visual Studio Code\n  MSSQL Extension Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-48569</span>\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-47287</span>\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42829</span>\n  Windows Administrator\n  Protection Secure Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  \n \n \n  <span>CVE-2026-34335</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45601</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45598</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45596</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45638</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45603</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42911</span>\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45594</span>\n  Windows Application\n  Identity (AppID) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45655</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45658</span>\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  SFB\n \n \n  <span>CVE-2026-45640</span>\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45605</span>\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-47656</span>\n  Windows Boot Manager\n  Security Feature Bypass Vulnerability\n  Important\n  7.9\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-44809</span>\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45634</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-45608</span>\n  Windows DHCP Client\n  Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-41108</span>\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42905</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n  <span>CVE-2026-44811</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44808</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44807</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42983</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44802</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44813</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44804</span>\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-48566</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-44814</span>\n  Windows DWM Core\n  Library Information Disclosure<span> \n  </span>Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45602</span>\n  Windows Dynamic Host\n  Configuration Protocol (DHCP) Tampering Vulnerability\n  Important\n  9.1\n  No\n  No\n  2\n  Tampering\n \n \n  <span>CVE-2026-42836</span>\n  Windows Function\n  Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42910</span>\n  Windows Hotpatch\n  Monitoring Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42972</span>\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45592</span>\n  Windows Internet\n  (wininet.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42903</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42914</span>\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-48583</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45653</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42984</span>\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45600</span>\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45604</span>\n  Windows Managed\n  Installer Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45595</span>\n  Windows Mark of the\n  Web Security Feature Bypass Vulnerability\n  Important\n  5.4\n  No\n  No\n  2\n  SFB\n \n \n  <span>CVE-2026-45636</span>\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-50508</span>\n  Windows NTLM Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  1\n  Spoofing\n \n \n  <span>CVE-2026-48565</span>\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-44805</span>\n  Windows Network\n  Controller (NC) Host Agent Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  DoS\n \n \n  <span>CVE-2026-42981</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-42974</span>\n  Windows Performance\n  Monitor Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45487</span>\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42828</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42837</span>\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42969</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  3\n  Info\n \n \n  <span>CVE-2026-42971</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42970</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42973</span>\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42978</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42977</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42979</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42991</span>\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45639</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42908</span>\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-45593</span>\n  Windows SDK Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42906</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42907</span>\n  Windows Shell\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-47648</span>\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42915</span>\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  2\n  DoS\n \n \n  <span>CVE-2026-42904</span>\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  9.6\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-42968</span>\n  Windows Telephony\n  Server Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  2\n  Info\n \n \n  <span>CVE-2026-42912</span>\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-45597</span>\n  Windows UI Automation\n  Manager (uiamanager.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  3\n  EoP\n \n \n  <span>CVE-2026-45599</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-45635</span>\n  Windows UPnP Device\n  Host Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  2\n  RCE\n \n \n  <span>CVE-2026-40409</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-40404</span>\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  2\n  EoP\n \n \n  <span>CVE-2026-42989</span>\n  Winlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  1\n  EoP\n \n \n \n  \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nLooking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That\u2019s also the case for five others. Of course, there wouldn\u2019t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There\u2019s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.\nMoving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it\u2019s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.\nThere are more than 60 Elevation of Privilege (EoP) bugs in this month\u2019s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server\u2019s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows \u201celevated\u201d privileges without really describing what elevated might be. \nMoving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself \u2014 specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls. \nTurning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It\u2019s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.\nThere are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could \u201cdisclose information over a network.\u201d How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.\nI\u2019ve never been a fan of the \u201ctampering\u201d category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn\u2019t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.\nThere are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated \"Exploitation More Likely,\" and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It\u2019s usually a big release, so strap in and hang on. I\u2019ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!\n ", "creation_timestamp": "2026-06-09T16:12:18.000000Z"}, {"uuid": "5cf834a6-6fa5-47d8-b5cc-8514a49c617a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45500", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0185", "content": "", "creation_timestamp": "2026-06-09T11:35:29.000000Z"}, {"uuid": "54fc87a8-8b3b-4a79-a198-c010e8db70b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45501", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0185", "content": "", "creation_timestamp": "2026-06-09T11:35:29.000000Z"}, {"uuid": "c75b043d-3b13-4355-b4bd-9890a67d6228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45502", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0185", "content": "", "creation_timestamp": "2026-06-09T11:35:29.000000Z"}, {"uuid": "ff424553-2436-45aa-a63a-a0de2b0ebd10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45503", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0185", "content": "", "creation_timestamp": "2026-06-09T11:35:29.000000Z"}, {"uuid": "8834c74b-4c68-4789-a89b-44e6dfe6b946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0185", "content": "", "creation_timestamp": "2026-06-09T11:35:29.000000Z"}, {"uuid": "e138e759-2d64-4f50-a31f-8e530dcd5889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45503", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moeca3l74h2e", "content": "\ud83d\udccc CVE-2026-45503 - Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network. https://www.cyberhub.blog/cves/CVE-2026-45503", "creation_timestamp": "2026-06-15T22:07:07.935288Z"}, {"uuid": "857b0b87-23e9-4f23-9b90-4cfd6918cd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116806581513063378", "content": "CVE-2026-45504 Microsoft Exchange SSRF via File Read https://hawktrace.com/blog/CVE-2026-45504/", "creation_timestamp": "2026-06-24T18:49:48.822042Z"}, {"uuid": "a47566de-2dc1-4e27-9e56-11222f61bd37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mp2lfmm6g3w2", "content": "CVE-2026-45504 Microsoft Exchange SSRF via File Read https://hawktrace.com/blog/CVE-2026-45504/", "creation_timestamp": "2026-06-24T18:49:58.005965Z"}, {"uuid": "e6711bd8-64db-4044-8b5b-53989bdb76f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mp3wk4ubik25", "content": "Thursday\u2019s fuck up - uptime - Microsoft Exchange - CVE-2026-45504 Exchange File Read\nREsearch - hawktrace.com/blog/CVE-202... POC - github.com/hawktrace/CV... #microsoft #exchange #ssrf #exploit #reseach #vulnerability #hack #hacker #redteam #hawktrace #team", "creation_timestamp": "2026-06-25T07:41:55.547115Z"}, {"uuid": "d5d2cdc9-1f4b-4fab-972c-c02e5debaf42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mpay6ksjjg2k", "content": "CVE-2026-45504: CVE-2026-45504 Microsoft Exchange File Read -  allows an authenticated low-privileged user to read arbitrary local files from the Exchange server by creating an EWS ReferenceAttachment with a crafted ProviderEndpointUrl pointing to an attacker-controlled server.", "creation_timestamp": "2026-06-27T07:54:32.194950Z"}, {"uuid": "9f22095c-ec61-4d9f-984e-3f16f11f7a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-privilege-escalation-vulnerability-exchange-server-2016-2019-and-subscription", "content": "", "creation_timestamp": "2026-07-01T02:49:52.946988Z"}, {"uuid": "b15b7701-1c31-4626-a534-edcc36fde08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://t.me/wh_lab/718", "content": "\ud83d\udce7 CVE-2026-45504 - Microsoft Exchange SSRF via File Read\n\n\ud83d\udd17 https://hawktrace.com/blog/CVE-2026-45504/\n\ud83d\udcbb PoC\n\n#exchange #cve #poc #windows\n\n\u2708\ufe0f Telegram \ud83d\udcac MAX", "creation_timestamp": "2026-08-15T08:00:03.876704Z"}, {"uuid": "06f335de-632d-4eeb-a7b6-3f00962e6cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mppb26onoj2k", "content": "HawkTrace publicly disclosed Microsoft Exchange vulnerability CVE-2026-45504 with PoC exploit code. The SSRF flaw reads arbitrary files. Patch now.\n#MicrosoftExchange #CVE202645504 #SSRF #Cybersecurity #PoC #Infosec", "creation_timestamp": "2026-07-03T00:10:25.573277Z"}, {"uuid": "0cea9c3f-3490-48ee-bd75-89916257e4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mpqb2ro3of2d", "content": "Critical Exchange Server 2019 SSRF Flaw Opens Silent File Theft Path for Authenticated Attackers (CVE-2026-45504) +\u00a0Video\n\nIntroduction: A Hidden Bridge Between Trust and Exploitation A newly uncovered vulnerability in Microsoft Exchange Server 2019 has exposed a dangerous weakness in how trusted\u2026", "creation_timestamp": "2026-07-03T09:43:24.895674Z"}, {"uuid": "82bb0e5f-e3bb-4821-b0b0-21859df583cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mpqdnlhr7z25", "content": "Microsoft Exchange\u306b\u5b58\u5728\u3059\u308bSSRF\u8106\u5f31\u6027\u3001\u6a29\u9650\u306e\u4f4e\u3044\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u306e\u8aad\u307f\u53d6\u308a\u304c\u53ef\u80fd\u306b\n\n\u65b0\u305f\u306b\u516c\u8868\u3055\u308c\u305fMicrosoft Exchange\u306e\u8106\u5f31\u6027\u306f\u3001CVE-2026-45504\uff08CVSS\u30b9\u30b3\u30a2: 8.8\uff09\u3068\u3057\u3066\u8b58\u5225\u3055\u308c\u3066\u304a\u308a\u3001\u6df1\u523b\u306a\u30b5\u30fc\u30d0\u30fc\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea(SSRF)\u306e\u6b20\u9665\u3092\u9732\u5448\u3059\u308b\u3082\u306e\u3067\u3059\u3002 \u3053\u306e\u554f\u984c\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u6a29\u9650\u306e\u4f4e\u3044\u30e6\u30fc\u30b6\u30fc\u304c\u3001\u8106\u5f31\u306aExchange\u30b5\u30fc\u30d0\u30fc\u4e0a\u306e\u4efb\u610f\u306e\u30d5\u30a1\u30a4...", "creation_timestamp": "2026-07-03T10:29:43.049412Z"}, {"uuid": "46da0caa-1795-4f05-90c1-fc56923bcbaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mpqy6hfn7t2x", "content": "CVE-2026-45504 in Microsoft Exchange lets authenticated users access arbitrary files. Update now. #MicrosoftExchange #SSRF #CVE202645504 #CyberSecurity #Vulnerability #EnterpriseSecurity thedailytechfeed.com/critical-ssr...", "creation_timestamp": "2026-07-03T16:37:04.601068Z"}, {"uuid": "6f3f345c-3212-48e6-bac2-8421de5c15e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mptxjvw2iu2o", "content": "CVE-2026-45504: The 88 CVSS Exchange SSRF Vulnerability That Lets Any Low-Privilege User Steal Your Server Files \u2013 Public PoC Now Available +\u00a0Video\n\nIntroduction: Microsoft Exchange Server, the backbone of enterprise email and collaboration for countless organizations, is once again in the\u2026", "creation_timestamp": "2026-07-04T21:03:34.238810Z"}, {"uuid": "3006c105-2eb8-4503-bf82-ee0f6d56f251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mpwpbdav322p", "content": "Microsoft Exchange Server\u306eSSRF \u8106\u5f31\u6027\u306ePoC \u516c\u958b-CVE-2026-45504\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-07-05T23:13:37.509949Z"}, {"uuid": "7f5be756-6d3d-4d55-9a65-1304be81ae27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mpxdev6wgk22", "content": "Microsoft Exchange\u306e\u8106\u5f31\u6027CVE-2026-45504\u306b\u5bfe\u3059\u308b\u6982\u5ff5\u5b9f\u8a3c\uff08PoC\uff09\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u304c\u516c\u958b\u3055\u308c\u308b \n\nMicrosoft Exchange Vulnerability CVE-2026-45504 Gets Public PoC Exploit  #DailyCyberSecurity (Jul 3)\n\nsecurityonline.info/microsoft-ex...", "creation_timestamp": "2026-07-06T05:13:39.114743Z"}, {"uuid": "1d278ee9-d202-423d-9b9d-536d7f70bb7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "published-proof-of-concept", "source": "https://t.me/wh_lab/718", "content": "\ud83d\udce7 CVE-2026-45504 - Microsoft Exchange SSRF via File Read\n\n\ud83d\udd17 https://hawktrace.com/blog/CVE-2026-45504/\n\ud83d\udcbb PoC\n\n#exchange #cve #poc #windows\n\n\u2708\ufe0f Telegram \ud83d\udcac MAX", "creation_timestamp": "2026-08-16T00:00:48.618029Z"}, {"uuid": "9cca3756-57b7-45c0-8fcc-e6b7344f478c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "seen", "source": "https://t.me/cyberwarehouse/1154", "content": "#cve \n\nCVE-2026-45504: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 SSRF \u0432 Exchange Server\u26a1\ufe0f\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u043c \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435-\u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0435\u0442 \u0430\u0434\u0440\u0435\u0441 \u0434\u043b\u044f \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (file:///C:/...). Exchange \u0434\u043e\u0432\u0435\u0440\u0447\u0438\u0432\u043e \u0447\u0438\u0442\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u0438 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0435\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043b\u044e\u0447\u0438 \u0438 \u043b\u044e\u0431\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-45504 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 on-premises Microsoft Exchange Server: Exchange Server 2016 Cumulative Update 23 (\u0441\u0431\u043e\u0440\u043a\u0438 \u043d\u0438\u0436\u0435 15.01.2507.069), Exchange Server 2019 Cumulative Update 14 (\u043d\u0438\u0436\u0435 15.02.1544.041), Exchange Server 2019 Cumulative Update 15 (\u043d\u0438\u0436\u0435 15.02.1748.046), Exchange Server Subscription Edition RTM (\u043d\u0438\u0436\u0435 15.02.2562.043).\n\n\u26a0\ufe0f \u0422\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u0447\u0438\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 PoC \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.", "creation_timestamp": "2026-07-26T02:00:05.482945Z"}, {"uuid": "581cd53a-6df0-4154-8ae4-c26ab547e9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45504", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1154", "content": "#cve \n\nCVE-2026-45504: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 SSRF \u0432 Exchange Server\u26a1\ufe0f\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u043c \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435-\u0441\u0441\u044b\u043b\u043a\u0443 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0435\u0442 \u0430\u0434\u0440\u0435\u0441 \u0434\u043b\u044f \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (file:///C:/...). Exchange \u0434\u043e\u0432\u0435\u0440\u0447\u0438\u0432\u043e \u0447\u0438\u0442\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u0438 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0435\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043b\u044e\u0447\u0438 \u0438 \u043b\u044e\u0431\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-45504 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 on-premises Microsoft Exchange Server: Exchange Server 2016 Cumulative Update 23 (\u0441\u0431\u043e\u0440\u043a\u0438 \u043d\u0438\u0436\u0435 15.01.2507.069), Exchange Server 2019 Cumulative Update 14 (\u043d\u0438\u0436\u0435 15.02.1544.041), Exchange Server 2019 Cumulative Update 15 (\u043d\u0438\u0436\u0435 15.02.1748.046), Exchange Server Subscription Edition RTM (\u043d\u0438\u0436\u0435 15.02.2562.043).\n\n\u26a0\ufe0f \u0422\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u0447\u0438\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 PoC \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.", "creation_timestamp": "2026-07-27T00:00:35.087610Z"}, {"uuid": "ae7c9b81-1886-45b0-b50a-e26162c295f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45501", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-66d81917-442e1a3db5444e7f", "content": "Exploits and vulnerabilities in Q2 2026\nThe vulnerability landscape shifted significantly in Q2 2026. First, the number of registered CVEs reached an unprecedented level. This is driven primarily by the widespread adoption of AI, both for application development and search for security flaws. This resulted in entire new classes of vulnerabilities emerging, particularly in the Linux networking subsystem.\nSecond, security researchers have been publishing exploits for unpatched vulnerabilities more frequently. Publications like these can generate significant fallout, since they potentially open the door for attackers to target unprotected systems.\nStatistics on registered vulnerabilities\nThis section provides statistical data on registered vulnerabilities. The data comes from Kaspersky\u2019s vulnerability knowledge base, which draws on the CVE database as well as the Russian BDU database and GitHub Advisory (GHSA). As a result, the figures for previous reporting periods may differ from those published in earlier reports.\nWe examine the number of registered vulnerabilities for each month over the last five years. As the chart below shows, this number continues to surge, a trend reflected across all the databases we track. It\u2019s driven primarily by the widespread adoption of AI tools: as we predicted in our previous report, these tools have played a major role in the discovery of vulnerabilities in third-party software. Meanwhile, these tools often contain security issues of their own. For example, OpenClaw, a popular AI project, ranked 12th among those with the highest number of vulnerabilities discovered and published in Q2, with over 200 CVEs registered during the reporting period. Finally, AI development tools are also contributing to the vulnerability landscape, since the quality of the code they produce can vary widely. Therefore, the rate at which new vulnerabilities are discovered will inevitably keep growing.\nTotal published vulnerabilities per month from 2022 through 2026 (download)\nNext, we analyze the number of new critical vulnerabilities (CVSS > 9.0) over the same period.\nTotal critical vulnerabilities published per month from 2022 through 2026 (download)\nAs the chart shows, the number of published critical vulnerabilities jumped sharply in Q2. This is because using AI for vulnerability research makes it possible to analyze massive amounts of previously unexamined code, uncover new attack surfaces, and identify entire classes of vulnerabilities that have gone unnoticed for decades. In particular, AI was used to find a series of Dirty Frag vulnerabilities in the Linux kernel.\nExploitation statistics\nThis section presents statistics on vulnerability exploitation for Q2 2026. The data draws on open sources and our telemetry.\nWindows and Linux vulnerability exploitation\nQ2 2026 saw a new precedent in the publication of vulnerabilities in Windows components and exploits for these: researchers no longer waiting for CVE registration, let alone patches. A case in point: a researcher who goes by Nightmare Eclipse (also known as Chaotic Eclipse) published a list of new \u201cnamed\u201d vulnerabilities across various Windows subsystems. At the time the technical details were published, none of the vulnerabilities had been assigned a CVE identifier:\n\nBlueHammer: a local privilege escalation vulnerability in Windows Defender. During signature database updates, a time-of-check to time-of-use (TOCTOU) race condition occurs, allowing an attacker to substitute the directory where temporary update files are written. The researcher published a fully functional exploit for the vulnerability.\nRedSun: another logical vulnerability in Windows Defender with a working exploit. Suspicious and malicious files marked as \u201ccloud\u201d can be overwritten or restored to their original directory with elevated privileges. The exploit incorporates fragments of algorithms that make it possible to leverage various logical vulnerabilities in Windows, effectively combining a large number of popular exploitation techniques.\nYellowKey: a vulnerability that lets the user bypass BitLocker full-disk encryption and access system data through the Windows Recovery Environment (WinRE). A fully functional exploit was also published.\nGreenPlasma: a vulnerability that enables system object injection via the CTF loader for the Collaborative Translation Framework (CTFMON) service in Windows. The original publication included an exploit with limited functionality.\nRougePlanet: yet another Windows Defender vulnerability that, like BlueHammer, stems from a TOCTOU issue, this time in the engine responsible for real-time system scanning. The published exploit uses the vulnerability to overwrite the system file wermgr.exe with a malicious one.\nUnDefend: another vulnerability in the Windows Defender service. This time, the exploit causes a denial of service and blocks updates.\nEven though such cases remain isolated for now, we believe they\u2019ll grow into a full-fledged trend. Early publication of exploits gives attackers an advantage over software developers, who are left with no time to fix the issues.\nVeteran vulnerabilities in Windows software also remain relevant. These are the ones our solutions most frequently detect exploits for:\n\nCVE-2018-0802: a remote code execution (RCE) vulnerability in the Equation Editor component\nCVE-2017-11882: another RCE vulnerability also affecting Equation Editor\nCVE-2017-0199: a vulnerability in Microsoft Office and WordPad that allows an attacker to gain control over the system\nCVE-2023-38831: a vulnerability in WinRAR that involves improper handling of objects within an archive\nCVE-2025-6218 (formerly ZDI-CAN-27198): another WinRAR vulnerability allowing the specification of relative paths to extract files into arbitrary directories, potentially leading to malicious command execution\nCVE-2025-8088: a vulnerability similar in exploitation method to CVE-2025-6218. The attackers used NTFS Streams to circumvent controls on the directory into which files are being unpacked\nThe vulnerabilities listed here can be leveraged to gain initial access to a vulnerable system and for privilege escalation. This underscores the critical importance of timely software updates.\nThat said, the number of Windows users who encountered exploits declined slightly in Q2, hitting an 18-month low.\nDynamics of the number of Windows users encountering exploits, Q1 2025 \u2013 Q2 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nLinux also hit a rough patch in Q2 2026. Specifically, the period saw the disclosure of the Dirty Frag family of vulnerabilities, which lets an attacker reliably escalate privileges within the operating system.\nAll the vulnerabilities published in Q2 2026 were, in one way or another, related to the Linux caching subsystem. Here are the ones being most actively exploited:\n\nCVE-2026-31431 (Copy Fail): a local privilege escalation vulnerability in the Linux kernel that lets an unprivileged user modify the page cache and gain root privileges. Especially dangerous for cloud and containerized environments\nCVE-2026-43284, CVE-2026-43500 (Dirty Frag): a family of vulnerabilities in the Linux networking subsystem (IPsec ESP and RxRPC) that lets a local user overwrite the page cache and escalate privileges to root\nCVE-2026-46300 (Fragnesia): a local privilege escalation vulnerability in the Linux kernel related to packet fragment handling and the page cache mechanism. It lets an unprivileged user gain root privileges and is also classified as part of the Dirty Frag family\nCVE-2026-31635 (DirtyDecrypt): a Linux kernel vulnerability that lets a local attacker escalate privileges due to improper handling of decryption operations and page cache data modification\nCVE-2026-43494 (PinTheft): a Linux kernel vulnerability that lets a local user gain elevated privileges due to errors in the memory page pinning mechanism\nCVE-2026-46331 (pedit COW): a vulnerability in the Linux kernel\u2019s traffic control subsystem (tc-pedit) that exploits a flaw in copy-on-write to modify the page cache and subsequently escalate privileges to root\nThe vulnerabilities described above were quickly embraced by attackers. At the same time, our solutions continue to detect exploitation attempts targeting older vulnerabilities as well:\n\nCVE-2022-0847: a vulnerability known as Dirty Pipe, which enables privilege escalation and the hijacking of running applications\nCVE-2019-13272: a vulnerability caused by improper handling of privilege inheritance, which can be exploited to achieve privilege escalation\nCVE-2021-22555: a heap out-of-bounds write vulnerability in the Netfilter kernel subsystem\nCVE-2023-32233: another Netfilter subsystem vulnerability that allows for Use-After-Free conditions and privilege escalation through improper processing of network requests\nDynamics of the number of Linux users encountering exploits, Q1 2025 \u2013 Q2 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nIn Q2 2026, the number of Linux users who encountered exploits declined slightly compared to Q1. Given that a significant share of new vulnerabilities are tied to the operating system\u2019s caching subsystem, we recommend installing patches as quickly as possible, or disabling vulnerable kernel modules if patching isn\u2019t an option.\nMost common published exploits\nThe distribution of published exploits by software type in Q2 2026 includes categories that haven\u2019t appeared in the sample for a long time. For instance, we\u2019re once again seeing exploits targeting SharePoint. It\u2019s worth noting that while several vulnerability write-ups for Exchange and SharePoint were published during the quarter, most turned out to be fake, AI-generated research. While the articles and exploit source code themselves look fairly polished, they describe nonexistent problems in the software or its components \u2014 often close to genuinely vulnerable mechanisms \u2014 in order to mislead researchers. This type of attack is aimed at increasing the time it takes to detect real vulnerabilities. In some cases, the description of a nonexistent vulnerability came bundled with completely unrelated malware.\nDistribution of published exploits by platform, Q1 2026 (download)\nDistribution of published exploits by platform, Q2 2026 (download)\nVulnerability exploitation in APT attacks\nWe analyzed which vulnerabilities were exploited in APT attacks during Q2 2026. The rankings provided below include data based on our telemetry, research, and open sources.\nTOP 10 vulnerabilities exploited in APT attacks, Q2 2026 (download)\nIn Q2 2026, a trend emerged in APT attacks toward exploiting new vulnerabilities right from the moment they\u2019re published. As before, we\u2019re also seeing a large number of zero-day vulnerabilities. The Langflow vulnerability deserves particular attention: it\u2019s one of the first cases of an APT group exploiting AI technology, which many organizations are only just beginning to integrate. Because most of this tech is proprietary, it has a considerable number of security blind spots. Therefore, given the growing number of AI-based automation tools, we strongly recommend going beyond the usual patching and developing secure procedures for credential use and sensitive data handling in systems that rely on agents and LLMs.\nC2 frameworks\nIn this section, we examine the most popular C2 frameworks used by APT groups and analyze the vulnerabilities targeted by the exploits that interacted with C2 agents in APT attacks.\nThe chart below shows the frequency of known C2 framework usage in attacks during Q2 2026, according to open sources.\nTOP 10 C2 frameworks used by APTs to compromise user systems, Q2 2026 (download)\nSliver, Havoc, AdaptixC2, and Metasploit remain the most widely used C2 frameworks. After studying open sources and analyzing samples of malicious C2 agents that contained exploits, we determined that the following vulnerabilities were utilized in APT attacks involving the C2 frameworks mentioned above:\n\nCVE-2026-35273: a vulnerability in Oracle PeopleSoft PeopleTools that security vendors classify as server-side request forgery (SSRF). The details of the vulnerability have never been disclosed, although some research covers the post-exploitation steps\nCVE-2023-46604: an insecure deserialization vulnerability in Apache ActiveMQ that allows arbitrary code execution in the context of the service process\nCVE-2024-12356 and CVE-2026-1731: command injection vulnerabilities in BeyondTrust software that allow an attacker to send malicious commands even without system authentication\nCVE-2023-36884: a vulnerability in the Windows Search component that allows commands to be run on the system, bypassing the mark-of-the-web (MoTW) mechanism\nCVE-2025-53770: an insecure deserialization vulnerability in Microsoft SharePoint that allows for unauthenticated command execution on the server\nCVE-2025-8088 and CVE-2025-6218: similar directory traversal vulnerabilities in WinRAR that allow files to be extracted from an archive to a predetermined path, potentially without the archiving utility displaying any alerts to the user\nThese vulnerabilities show that attackers used them for initial access and privilege escalation on vulnerable systems, setting the stage for launching a C2 agent. They include both zero-day vulnerabilities and fairly well-known security issues.\nLLM/AI tool vulnerabilities\nThis section analyzes data published in Kaspersky\u2019s vulnerability knowledge base. We reviewed the Q2 2026 version of the knowledge base.\nAs mentioned above, AI tools, plugins, and technologies have proven fairly effective at automating the search for problematic code and anomalous behavior. The high speed at which new vulnerabilities are being discovered has naturally created a need to fix them just as quickly. AI is often used for this too, which increases the volume of code being generated. However, neither code written without human involvement nor AI-generated advice is always correct.\nThe chart below covers registered vulnerabilities in AI tools for 2025\u20132026.\nNumber of published vulnerabilities in LLMs, AI tools, and plugins with similar functionality, 2025\u20132026 (download)\nAs the charts show, AI tools are racking up a substantial number of registered vulnerabilities, and that number keeps growing quarter over quarter. It\u2019s also worth looking at how AI tool vulnerabilities break down by type, according to the CWE system:\nTOP 6 vulnerability types in products that implement or use AI/LLM logic, 2025\u20132026\nInterestingly, vulnerabilities of an undetermined type have ranked first in every quarter since the start of 2025. Traditionally-made software has the same issue, and it doesn\u2019t look like the growing number of AI tools will fix it. It\u2019s also notable that the list includes classes CWE developers themselves don\u2019t recommend using for vulnerability classification, since they lump together a whole range of more specific types. CWE-284 is an example of this.\nLooking at the most common classes, the key issues found in AI-related software can be summed up as follows:\n\nInadequate access control over critical system objects\nImproper implementation of authentication and authorization mechanisms\nInjections\nIt\u2019s worth noting that injection-related vulnerabilities were relatively rare before AI agents took off (previously, they mostly affected web apps). Recently, though, these security issues have become relevant again.\nLooking back at a year and a half of the AI boom, one conclusion stands out regarding registered vulnerabilities: AI tool developers are more focused on expanding functionality than on security. This is worth keeping in mind when using these tools. Let\u2019s look at the projects and applications that either integrated AI tools or offered them as the core product. Below is a list of the those with the highest number of registered vulnerabilities for 2025\u20132026.\nTOP AI/LLM-related projects by number of published vulnerabilities, 2025\u20132026 (download)\nNotable vulnerabilities\nThis section highlights the most significant vulnerabilities published in Q2 2026 that have publicly available descriptions. Since the above already covers several significant vulnerabilities published during the reporting period, this section consists mainly of LLM/AI tool vulnerabilities.\nCVE-2026-25253: a gatewayUrl vulnerability in OpenClaw\nThe issue stems from the fact that the OpenClaw user interface trusts the value of the gatewayUrl parameter passed in the URL and automatically establishes a WebSocket connection to the specified address. During this connection process, it sends an authentication token without any additional user confirmation.\nThe attack algorithm exploiting this vulnerability works as follows:\n\nThe application obtains a critical connection address from an external source (the gatewayUrl URL parameter), which is controlled by the attacker.\nThere is no validation before use.\nThe client automatically initiates a connection to the address specified in the parameter, which belongs to the attacker.\nWhile connected, the application sends credentials (an access token) to the specified address.\nIf the attacker obtains a valid token, the consequences depend on that token\u2019s level of access within the system. In general, this could lead to:\n\nUser session compromise\nExecution of operations on the user\u2019s behalf\nModification of the AI agent configuration\nUnauthorized access to tools and resources connected to the agent\nUnder certain OpenClaw configurations, further compromise of the host running the agent\nIt\u2019s worth noting that the risk of exploitation arises from a combination of several factors: the automatic connection and token transmission, the lack of address trust verification, and the high privileges granted to the local AI agent.\nCVE-2026-41948: a path traversal vulnerability in the Dify AI platform\nThe vulnerability lets an authenticated user craft a request that enables the application to escape its permitted tenant and gain access to internal REST APIs that weren\u2019t meant for that user. The root cause is insufficient normalization and validation of the URL path before it\u2019s passed to the internal service.\nDepending on the Dify configuration, the consequences can include:\n\nUnauthorized access to internal service interfaces\nBreach of isolation between workspaces\nExposure of internal service information\nConditions favorable to further attacks when combined with other vulnerabilities\nThe use of Dify in enterprise AI platforms is particularly risky, since internal services there tend to hold elevated privileges.\nCVE-2026-45386: an improper access control vulnerability in Open WebUI\nIn Open WebUI, pin/unpin operations on messages are write operations, since they modify that message\u2019s metadata (is_pinned, pinned_by, pinned_at). In vulnerable versions, however, before performing these actions, the API only checked for read access to the channel (a chat between a user or group and the AI) containing the message, not permission to modify its content. As a result, a user with a role limited to viewing messages could still change a message\u2019s pinned status.\nThe vulnerability\u2019s mechanism works as follows:\n\nThe user initiates an action that changes the state of an object.\nThe application treats this action as a regular read request.\nOnly channel view permission is checked.\nThe application performs a write without verifying the required user authorization.\nThis violates one of the fundamental principles of access control models \u2014 namely, that any operation that changes the state of data must be checked for the appropriate write or moderation permissions, regardless of whether the object itself is readable.\nAlthough the vulnerability doesn\u2019t lead to arbitrary code execution or compromise of sensitive data, it can affect data integrity and collaborative workflows. Potential consequences of exploitation include unauthorized pinning or unpinning of messages, disruption of channel moderators\u2019 and administrators\u2019 activities, changes to the display order of important information, and even the potential spread of false or misleading information by altering the channel containing a pinned message.\nOpen WebUI is widely used as an interface for interacting with local and enterprise LLMs. In these systems, pinned messages often contain important instructions, announcements, or tips for users. The ability to modify them with minimal privileges can disrupt collaborative workflows, cause confusion, and undermine trust in information published by administrators and moderators.\nCVE-2026-45501: a vulnerability in Microsoft Exchange\nThe vulnerability stems from improper neutralization of user input when generating Exchange web pages. As a result, the browser may interpret specially crafted data as active content instead of plain text.\nAlthough Microsoft categorizes the potential impact of exploiting this vulnerability as spoofing, flaws like this can lead to alteration of displayed content, imitation of trusted interfaces, actions on behalf of the user within an active session, and abuse of user trust.\nIt\u2019s worth noting that issues like this are still relevant in modern software, given that mechanisms like Content Security Policy and various parsers were specifically created to help developers neutralize dangerous parts of user page content.\nConclusion and advice\nQ2 brought the first significant results of AI automation adoption in software development and vulnerability hunting tools. This research shows that beyond traditional patch management, organizations now need real-time monitoring of systems and access controls, since infrastructure and everyday applications now contain far more AI functionality that could lead to compromise.\nAccordingly, besides quickly detecting infrastructure vulnerabilities and managing security patches, modern enterprise-grade security solutions need to provide a broad range of preventive measures for tracking the overall health of systems and workstations. Kaspersky Next meets these requirements by combining proactive mechanisms with the ability to respond promptly to emerging threats. \nsecurelist.com/vulnerabilities\u2026", "creation_timestamp": "2026-08-26T10:30:36.917791Z"}]}