{"vulnerability": "cve-2026-5052", "sightings": [{"uuid": "72172378-b818-4c3f-9e52-d2c20594c85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5052", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjob2xkorz2f", "content": "", "creation_timestamp": "2026-04-17T06:07:04.306792Z"}, {"uuid": "128866ca-b867-440a-acb3-438d4b78cea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50521", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0811", "content": "", "creation_timestamp": "2026-07-01T02:43:37.058970Z"}, {"uuid": "bfd12d8d-2694-40aa-ad15-b1f46e029f7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50521", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1939", "content": "", "creation_timestamp": "2026-07-01T02:49:36.780735Z"}, {"uuid": "3ee25e1f-f433-4cb2-9e9d-93d68f21cb88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50521", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmgxwfqf32e", "content": "CVE-2026-50521 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability\nCVE ID : CVE-2026-50521\n \n Published : July 1, 2026, 8:14 p.m. | 58\u00a0minutes ago\n \n Description : None\n \n Severity: 8.3 | HIGH\n \n Visit the link for more details, such as CVSS details, affected...", "creation_timestamp": "2026-07-01T21:18:32.248717Z"}, {"uuid": "0e27fac9-c7bd-467b-ac20-d8f9c4c8412f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50521", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116848401156175297", "content": "A new vulnerability with increased severity was disclosed for Microsoft Edge (CVE-2026-50521) https://vuldb.com/vuln/375687", "creation_timestamp": "2026-07-02T04:05:05.931391Z"}, {"uuid": "d3be6086-3242-47e2-9593-98023e3d1d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50521", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpnaruwlfc2p", "content": "CVE-2026-50521 - Critical Use After Free in Microsoft Edge. Remote code execution over network. CVSS 8.3. No patch yet. Mitigate now. #CVE #Microsoft #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-50521/", "creation_timestamp": "2026-07-02T05:00:27.425688Z"}, {"uuid": "55306f5f-0698-42cd-9483-ac49854ba8ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50521", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo35uyaol2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50521 \u0432 Microsoft Edge: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438\n\n\n\nhttps://kripta.biz/posts/4596ED13-34F4-41B7-A979-88480E75FF05", "creation_timestamp": "2026-07-02T12:52:26.826917Z"}, {"uuid": "197f39a6-7362-455d-b18b-a48ab673f872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmufqojqv2b", "content": "CVE-2026-50522 - microsoft sharepoint enterprise server 2016\nAn attacker can exploit a weakness in Microsoft SharePoint, potentially allowing them to run unauthorized code on a network. This could compromise\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-07-14T18:44:06.845261Z"}, {"uuid": "acda7d8e-2f41-4a3f-beb6-7317d543f0e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:00:52.848361Z"}, {"uuid": "620cd660-18ac-46a0-b2bc-62bbf53d7298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50520", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:00:59.722041Z"}, {"uuid": "26d9e8f0-c33f-484e-99bc-1fe28b567fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:00.905912Z"}, {"uuid": "bf037420-e051-470e-b6ec-101c4d7420eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:00:59.895384Z"}, {"uuid": "d19323d3-df9e-4bb9-a52f-9111bb58271a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:00:59.951733Z"}, {"uuid": "f43fe465-9f36-4a65-87b2-954508d217c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:00.843759Z"}, {"uuid": "557f039b-3e05-4a52-92dd-809b6edfc476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:00.968592Z"}, {"uuid": "ad5440f4-0508-4f15-8186-c57ee2c353a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:34:08.793646Z"}, {"uuid": "fdfb6146-e2b0-4659-848c-7422e598771d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:34:09.183732Z"}, {"uuid": "653baf9f-1d1d-4b5c-ba4d-411bbb0d8e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:34:09.626998Z"}, {"uuid": "aba473a8-6579-4f6a-9888-33870c798e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:34:10.042778Z"}, {"uuid": "b08e0985-94b6-4a35-b2f7-cb2db1dcdc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvr2k2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:34:10.455283Z"}, {"uuid": "13e1a798-bae0-45f7-8130-0ab4ebea3c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jwrze22u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:34:30.732478Z"}, {"uuid": "ac691713-e05f-48df-8665-7885cd339c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvww22u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:34:17.419357Z"}, {"uuid": "f591f485-f7a3-4f68-9a09-3f673bd9eff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvww22u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:34:17.816116Z"}, {"uuid": "19d9fe2d-1401-460c-8dc6-f4fea44eca6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jws2dc2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:34:43.735226Z"}, {"uuid": "684a519e-24fc-48c0-8bb1-f08888c4b463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jws2dc2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:34:44.163416Z"}, {"uuid": "3195c604-31d9-440c-bb2d-2827c53cb6e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahl2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:35:00.719252Z"}, {"uuid": "70677a41-8617-4bfc-9644-cd74bcad987c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahl2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:35:01.153970Z"}, {"uuid": "3cc5feca-2d12-4401-821d-950913862db1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2bgt2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:35:09.098201Z"}, {"uuid": "4352db99-7811-497c-9e14-4af60ba5a7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2bgt2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:35:09.907032Z"}, {"uuid": "81d5820f-4231-42e8-8ff2-38e87b82e907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jws2dc2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:34:44.563214Z"}, {"uuid": "cce0c953-c686-4939-8aa9-f61078043f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jws2dc2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:34:44.984537Z"}, {"uuid": "592cd26c-e421-4f9c-bf0f-7aa6f9d44205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvww22u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:34:16.992049Z"}, {"uuid": "049af765-7c47-443a-948b-c200525ca26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvww22u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:34:18.230266Z"}, {"uuid": "9a7e1194-e95c-496d-b566-f41e6c07c035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jvvww22u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:34:18.959642Z"}, {"uuid": "7bbde1eb-bc43-48e5-9d6f-21d8e44637e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jwrze22u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:34:30.312038Z"}, {"uuid": "037a9adc-09d3-454a-89e7-79ace60ebeb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jwrze22u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:34:31.148225Z"}, {"uuid": "e4ac3369-cb60-4b4e-850e-5be03c2cfdff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jwrze22u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:34:31.559979Z"}, {"uuid": "f49994be-d585-45bd-b72e-94617d7ce920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jwrze22u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:34:37.409473Z"}, {"uuid": "78119e34-c786-49fb-ad51-6371e228181e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jws2dc2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:34:42.949438Z"}, {"uuid": "27c6fb0e-90ec-4429-9437-d862bb1bf404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahk2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:34:52.103599Z"}, {"uuid": "f90188ab-1941-4f6f-8173-7093d53cb284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahl2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:35:00.299558Z"}, {"uuid": "ff7d0005-ede6-4c78-a511-04bf95e8c759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2bgt2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:35:09.500202Z"}, {"uuid": "e11ec01d-ca7b-4fd2-866f-df5c288c0834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jyrz7d2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:35:34.161414Z"}, {"uuid": "318ae346-65c1-4e16-b66d-5ea460e556ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jza6dd2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:36:17.405271Z"}, {"uuid": "6dd55a40-356c-493e-893c-6f5cbb243dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k3xahl2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:36:34.028364Z"}, {"uuid": "81f038d9-9304-4358-84c3-242dfb0a880e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k7rfnd2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:36:57.420984Z"}, {"uuid": "5cbcb9c1-1c14-4603-bcfc-c9060e166ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2keqrat2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:37:28.112569Z"}, {"uuid": "b1744f02-01f9-497c-a733-edf1e568ce53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahk2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:34:50.455461Z"}, {"uuid": "0d9fe138-16b8-4670-be0f-39041a1fecaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahk2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:34:50.853467Z"}, {"uuid": "02abb70e-bf48-4100-87a1-25f4b9f47240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahk2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:34:51.275220Z"}, {"uuid": "39efc962-c5b5-41d7-af08-a149c2f403b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahk2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:34:51.686219Z"}, {"uuid": "48af1033-0e3a-44be-b168-ded7c2297409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahl2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:34:59.857339Z"}, {"uuid": "e0566bb8-4e22-4482-a17f-f17539cce511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2ahl2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:35:01.555863Z"}, {"uuid": "6cc77a63-89ec-404f-b859-201c909b6a5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2bgt2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:35:08.701525Z"}, {"uuid": "21749a66-e469-44d6-9192-046b73739a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jy2bgt2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:35:28.271321Z"}, {"uuid": "95213fcd-60ac-49e7-a64f-bdb8d4094b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jyrz7d2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:35:33.733878Z"}, {"uuid": "4f605a0a-a039-4010-9bd0-f0f85424f334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jyrz7d2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:35:35.024607Z"}, {"uuid": "83db9713-9f2a-4270-8409-2f16d0fd13fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jyrz7d2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:35:35.464339Z"}, {"uuid": "e8bdc973-3fdd-4875-9079-77b240029b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jzn7d32u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:36:26.612952Z"}, {"uuid": "ab9ee40c-5ee8-4495-920d-e0dd068bd81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k4fpe32u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:36:43.042985Z"}, {"uuid": "0f166129-7ad4-41ff-93b7-8dcb5d1f76d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k4fpe32u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:36:43.985091Z"}, {"uuid": "287f19ba-68cc-4d96-bd6c-bbacb0fb4c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2keqrat2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:37:29.974075Z"}, {"uuid": "5a7a7a00-7887-4a93-bba7-cc7be18af2b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kfaael2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:37:38.129578Z"}, {"uuid": "2ac3126f-a7b5-462e-8427-0e13d95d39f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kfaael2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:37:38.533007Z"}, {"uuid": "bd046148-1c02-46ee-a864-bf2c0e099777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jyrz7d2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:35:34.581504Z"}, {"uuid": "076a0922-e3e1-43f5-8201-fb258a66b656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jza6dd2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:36:16.545478Z"}, {"uuid": "8c692b53-7d78-43fe-8a8f-7bb752e5fa17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jza6dd2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:36:16.971658Z"}, {"uuid": "98306dca-7049-410f-9913-59e058923751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jza6dd2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:36:17.822817Z"}, {"uuid": "4aecd14d-642a-4bed-af30-c8a926f0b578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jza6dd2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:36:18.710157Z"}, {"uuid": "fa91b06e-a79a-4532-935c-f30a892fe4f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jzn7d32u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:36:24.216211Z"}, {"uuid": "fe6ef6d3-1527-48d8-b0e2-4652cc7120a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jzn7d32u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:36:27.039029Z"}, {"uuid": "e294eb77-15c0-462b-a92f-c9a7e79a2e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jzn7d32u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:36:27.474301Z"}, {"uuid": "e8f0be29-0652-4871-9593-5c467d1d5b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2jzn7d32u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:36:27.911078Z"}, {"uuid": "ae92cded-c3f1-4798-88f6-298246c22a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k3xahl2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:36:34.465376Z"}, {"uuid": "ad440bf7-9f4d-4d0f-8fc9-5d6f139f8c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k3xahl2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:36:34.890531Z"}, {"uuid": "90ef25fb-df45-443f-a250-804694ca5615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k3xahl2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:36:35.315339Z"}, {"uuid": "20d60e0a-4b8e-4979-b681-65e59619337b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k3xahl2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:36:35.729847Z"}, {"uuid": "b4e937ff-e987-4b55-bc38-a471013bfb50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k4fpe32u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:36:42.195694Z"}, {"uuid": "08c605e7-0a15-4dc5-ac2c-ea0f9c1e00ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k4fpe32u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:36:41.753595Z"}, {"uuid": "6ec517b5-9b5c-4017-892e-56560672ced4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k4fpe32u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:36:42.610365Z"}, {"uuid": "aee8a146-ab27-47ab-8b04-36e2739277b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kfaael2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:37:36.851375Z"}, {"uuid": "2cea6172-79d6-4063-a502-d717193bb8fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kcamsd2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:37:20.959429Z"}, {"uuid": "363d126c-fdc1-4aa8-a029-a9c87e845b91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k6ve6l2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:36:51.142903Z"}, {"uuid": "6b875b99-04df-4330-8a36-e1fa7687a1d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2ka72632u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:37:04.576838Z"}, {"uuid": "82be56c1-4a2b-4b30-941f-9809ac9da532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kcamsd2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:37:20.514652Z"}, {"uuid": "9cb6e64a-7788-4514-8333-2e9db89dd21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kcamsd2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:37:22.495295Z"}, {"uuid": "6b26f570-68b8-41af-8a4e-400e27ec3bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k7rfnd2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:36:59.036478Z"}, {"uuid": "5e20f62c-3558-490d-986a-4a1bbc682b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2ka72632u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:37:05.767718Z"}, {"uuid": "66cc811e-cf4f-4f89-9151-e2a59848a2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2ka72632u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:37:06.186971Z"}, {"uuid": "75ee058b-d33f-40cb-8257-5e7a5981c6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kcamsd2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:37:21.637843Z"}, {"uuid": "33b859f7-38f7-4d03-b91b-fa3ee5130b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kcamsd2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:37:22.073377Z"}, {"uuid": "6de5996e-9563-44dc-af10-c41f115f166b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kfaael2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:37:37.288795Z"}, {"uuid": "31366b26-23f8-4fae-be9d-456191e3fce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kfaael2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:37:37.704164Z"}, {"uuid": "600e9a47-ff46-4619-ad65-52a3542a1c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k6ve6l2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:36:50.313050Z"}, {"uuid": "030690fa-a262-4a28-beea-659e5fc0c0d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k6ve6l2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:36:50.722989Z"}, {"uuid": "3fae41b1-382a-46fa-9d1f-ad2376a07cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k6ve6l2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:36:51.558281Z"}, {"uuid": "9bdcfa39-7b83-4d8c-95c1-0de466e82d3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k6ve6l2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:36:51.996221Z"}, {"uuid": "8d77be6f-7f69-4f95-b2e6-1e8f1b74cf22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k7rfnd2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:36:57.821160Z"}, {"uuid": "1df71449-d1d7-4ba5-ba78-12bcbc840580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k7rfnd2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:36:58.217054Z"}, {"uuid": "ccf19210-c0f8-4888-b6f0-471f47e56f57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2k7rfnd2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:36:58.622305Z"}, {"uuid": "aeba9c71-7be5-4f56-b6f4-f4cf588a35a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2ka72632u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:37:05.333774Z"}, {"uuid": "18c6410e-ff34-4e42-804e-f1fc23f542fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kbkcwl2u", "content": "CVE-2026-50524 | .NET Denial of Service Vulnerability \n\nIf you are making or receiving TLS requests you could be vulnerable to a DoS. So pretty much most of you. Go apply the patch.", "creation_timestamp": "2026-07-14T20:37:11.980587Z"}, {"uuid": "b9a1725e-f89f-4f93-96cc-2c541410891f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2ka72632u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:37:06.609754Z"}, {"uuid": "1d1703cf-a9a0-43b8-b776-a06ce7a367bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kbkcwl2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:37:12.411182Z"}, {"uuid": "b7a2305e-d3bc-42a7-9b09-a03c86520de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kbkcwl2u", "content": "CVE-2026-50528 | .NET Security Feature Bypass Vulnerability\n\nAn interesting attack on TLS, bypassing auth.", "creation_timestamp": "2026-07-14T20:37:13.893903Z"}, {"uuid": "28ff6755-92c1-476b-badf-332def3fc22f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2keqrat2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:37:29.552320Z"}, {"uuid": "ae403284-210b-42e1-a9cc-6a3ee9881dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kbkcwl2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:37:12.839032Z"}, {"uuid": "b717bcdc-bbef-45e4-9d2a-5c91f1f27e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2kbkcwl2u", "content": "CVE-2026-50527 | .NET Denial of Service Vulnerability\n\nEncryptedXml DoS through another type of malformed document.", "creation_timestamp": "2026-07-14T20:37:13.284675Z"}, {"uuid": "e3afe8f4-b8ca-4a2e-ac96-8f24dd942338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2keqrat2u", "content": "CVE-2026-50525 | .NET Denial of Service - More EncryptedXML, where a malformed XML document could cause runaway memory consumption and down goes your app.", "creation_timestamp": "2026-07-14T20:37:28.545897Z"}, {"uuid": "c4a70aea-18db-42d1-a5be-4cb6e94f4586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mqn2keqrat2u", "content": "CVE-2026-50526 | .NET Tampering Vulnerability\n\nOnly applies if you are building your own containers and don't reset your build machines between each build. Which you should be doing anyway. Patch your build pipelines.", "creation_timestamp": "2026-07-14T20:37:28.970025Z"}, {"uuid": "e7186523-c265-470d-88bc-088f697856eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://t.me/kasperskyb2b/2258", "content": "\ud83e\udd2f \u0426\u0443\u043d\u0430\u043c\u0438 \u0443\u0436\u0435 \u0437\u0434\u0435\u0441\u044c: \u043c\u043e\u043d\u0441\u0442\u0440\u0443\u043e\u0437\u043d\u044b\u0439 Path Tuesday\n\n\u0412\u0441\u0451, \u043e \u0447\u0451\u043c \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0438 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0430\u043d\u043e\u043d\u0441\u0430 Mythos, \u043e\u0431\u0440\u0435\u0442\u0430\u0435\u0442 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043e\u0447\u0435\u0440\u0442\u0430\u043d\u0438\u044f. \u0412 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u043c Patch Tuesday \u0437\u0430\u043a\u0440\u044b\u0442\u043e 570 (!!!) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft, \u0430 \u0435\u0441\u043b\u0438 \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u0442\u044c \u00ab\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0435\u00bb, \u0433\u0434\u0435 \u0432\u0441\u0451 \u043f\u0430\u0442\u0447\u0438\u0442\u0441\u044f \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 Microsoft, \u0441\u0447\u0451\u0442 \u0432\u043e\u0437\u0440\u0430\u0441\u0442\u0430\u0435\u0442 \u0434\u043e 620. \u0418 \u044d\u0442\u043e \u0435\u0449\u0451 \u0431\u0435\u0437 470 (!!!) \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432 Chrome/Chromium, \u0444\u0438\u043a\u0441\u044b \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u0448\u043b\u0438 \u0434\u043b\u044f Edge. \u0421 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0435 \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u0431\u0430\u0433\u043e\u0432, \u0447\u0435\u043c \u0432 \u043b\u044e\u0431\u043e\u0439 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0439 \u0433\u043e\u0434.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0431\u0430\u0433\u043e\u0432, \u043d\u043e \u0438 \u0442\u043e, \u0432 \u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043e\u043d\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b. \u0412\u043e \u0432\u0441\u0435\u0445. \u0412\u043a\u043b\u044e\u0447\u0430\u044f Age of Empires \u0438 Minecraft server, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430, \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u044c\u0441\u044f, \u0434\u0430\u0432\u043d\u0435\u043d\u044c\u043a\u043e \u043d\u0435 \u0441\u043b\u044b\u0448\u0430\u043b\u0430. \n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0435\u0441\u0442\u044c \u0438 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438. \u0418\u0437 \u044d\u0442\u043e\u0439 \u043f\u0430\u0447\u043a\u0438 \u0442\u043e\u043b\u044c\u043a\u043e 3 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u0430\u043a \u0437\u0438\u0440\u043e\u0434\u0435\u0438 (\u043e\u0436\u0438\u0434\u0430\u0435\u043c\u043e), \u0438 \u00ab\u0432\u0441\u0435\u0433\u043e\u00bb 59 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445. \u0421\u0440\u0435\u0434\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, 48 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a RCE, 9 \u2014 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0434\u043d\u0430 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438 \u043e\u0434\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043f\u0443\u0444\u0438\u043d\u0433.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\nCVE-2026-56155 (CVSS 7.8) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Active Directory Federation Services. \u042d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0441\u043a\u0438\u0445. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u0442\u043e\u043c, \u0432 \u043a\u0430\u043a\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f.\n\nCVE-2026-56164 (CVSS 5.3) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 Microsoft SharePoint Server, \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0438\u0437\u043a\u0430\u044f, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u043d\u043e \u043a\u0430\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043e. \u0417\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f\u0442 Mandiant/Google, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0451 \u0438 \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f.\n\n\u0422\u0440\u0435\u0442\u0438\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 (\ud83d\ude0f) \u043e\u0431\u0445\u043e\u0434 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f BitLocker CVE-2026-50661 (CVSS 6.1), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043c\u044b \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u0435\u043c \u043a\u0435\u043c.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0430\u0433\u043e\u0432 \u043c\u043d\u043e\u0433\u043e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043b\u0438\u0448\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0440\u043e\u0447\u043d\u044b\u0435. \u0423 \u043f\u0430\u0440\u043e\u0447\u043a\u0438 \u0438\u0437 \u043d\u0438\u0445 CVSS 9.9, \u0438 \u043d\u0438\u0433\u0434\u0435 \u0432 \u044d\u0442\u043e\u043c \u0441\u043f\u0438\u0441\u043a\u0435 \u0446\u0438\u0444\u0440\u0430 \u043d\u0435 \u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043d\u0438\u0436\u0435 9.6.\n\nCVE-2026-57092 \u2014 EoP \u0432 VMSwitch, \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0441 \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 \u0445\u043e\u0441\u0442\u0430.\nCVE-2026-56190 \u2014 RCE \u0432 RDP, \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e \u0441\u0435\u0442\u0438, \u0431\u0435\u0440\u0435\u0433\u0438\u0442\u0435 \u0432\u0430\u0448\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\nCVE-2026-50518 \u2014 RCE \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 DHCP\nCVE-2026-50522 \u0438 -58644 \u2014 RCE \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 SharePoint \nCVE-2026-56188 \u2014 RCE \u0432 WIndows Server network driver\nCVE-2026-55008 \u2014 \u0441\u043f\u0443\u0444\u0438\u043d\u0433 \u0432 Exchange Server (\u043c\u044b \u043d\u0435 \u0437\u043d\u0430\u0435\u043c, \u043f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0441\u043f\u0443\u0444\u0438\u043d\u0433, \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u043d\u044b\u043c \u043f\u043e \u0431\u0435\u043b\u043e\u043c\u0443 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e XSS).\n\n\u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u043f\u0430\u0442\u0447\u0435\u0439 \u0441\u0442\u0430\u043d\u0443\u0442 \u043d\u043e\u0440\u043c\u043e\u0439, \u0431\u0435\u0437 \u0440\u0430\u0434\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0430 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 VM \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0418\u0411 \u0438 \u0418\u0422 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0437\u0430\u043d\u0438\u043c\u0430\u0442\u044c\u0441\u044f \u043d\u0438\u0447\u0435\u043c \u0434\u0440\u0443\u0433\u0438\u043c, \u043e\u0434\u043d\u0438\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u043e\u043c. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2026-07-14T21:00:04.180067Z"}, {"uuid": "72e7182e-7205-49ae-b454-1ccc5f11683e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:05.301448Z"}, {"uuid": "e8aab99b-2d44-4983-bc95-e2a8c7816996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:24.978578Z"}, {"uuid": "c6c505b7-8154-48f6-98ff-9dfea8de84bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:26.235690Z"}, {"uuid": "a951b190-e914-4f54-85aa-4bdbb435bc28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:25.914628Z"}, {"uuid": "6462d122-1a5e-41e6-ba1e-2ea90da6f360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:27.936058Z"}, {"uuid": "c89e5a18-d63c-4e03-9299-4adf6fb0ea38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:28.825810Z"}, {"uuid": "ba288065-7e3e-4f37-83fa-9da82e125f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50520", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:28.370577Z"}, {"uuid": "ba39c6a6-4067-4545-adbd-d12d4ad5525d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://t.me/kasperskyb2b/2258", "content": "\ud83e\udd2f \u0426\u0443\u043d\u0430\u043c\u0438 \u0443\u0436\u0435 \u0437\u0434\u0435\u0441\u044c: \u043c\u043e\u043d\u0441\u0442\u0440\u0443\u043e\u0437\u043d\u044b\u0439 Path Tuesday\n\n\u0412\u0441\u0451, \u043e \u0447\u0451\u043c \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0438 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0430\u043d\u043e\u043d\u0441\u0430 Mythos, \u043e\u0431\u0440\u0435\u0442\u0430\u0435\u0442 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043e\u0447\u0435\u0440\u0442\u0430\u043d\u0438\u044f. \u0412 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u043c Patch Tuesday \u0437\u0430\u043a\u0440\u044b\u0442\u043e 570 (!!!) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft, \u0430 \u0435\u0441\u043b\u0438 \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u0442\u044c \u00ab\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0435\u00bb, \u0433\u0434\u0435 \u0432\u0441\u0451 \u043f\u0430\u0442\u0447\u0438\u0442\u0441\u044f \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 Microsoft, \u0441\u0447\u0451\u0442 \u0432\u043e\u0437\u0440\u0430\u0441\u0442\u0430\u0435\u0442 \u0434\u043e 620. \u0418 \u044d\u0442\u043e \u0435\u0449\u0451 \u0431\u0435\u0437 470 (!!!) \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432 Chrome/Chromium, \u0444\u0438\u043a\u0441\u044b \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u0448\u043b\u0438 \u0434\u043b\u044f Edge. \u0421 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0435 \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u0431\u0430\u0433\u043e\u0432, \u0447\u0435\u043c \u0432 \u043b\u044e\u0431\u043e\u0439 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0439 \u0433\u043e\u0434.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0431\u0430\u0433\u043e\u0432, \u043d\u043e \u0438 \u0442\u043e, \u0432 \u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043e\u043d\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b. \u0412\u043e \u0432\u0441\u0435\u0445. \u0412\u043a\u043b\u044e\u0447\u0430\u044f Age of Empires \u0438 Minecraft server, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430, \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u044c\u0441\u044f, \u0434\u0430\u0432\u043d\u0435\u043d\u044c\u043a\u043e \u043d\u0435 \u0441\u043b\u044b\u0448\u0430\u043b\u0430. \n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0435\u0441\u0442\u044c \u0438 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438. \u0418\u0437 \u044d\u0442\u043e\u0439 \u043f\u0430\u0447\u043a\u0438 \u0442\u043e\u043b\u044c\u043a\u043e 3 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u0430\u043a \u0437\u0438\u0440\u043e\u0434\u0435\u0438 (\u043e\u0436\u0438\u0434\u0430\u0435\u043c\u043e), \u0438 \u00ab\u0432\u0441\u0435\u0433\u043e\u00bb 59 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445. \u0421\u0440\u0435\u0434\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, 48 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a RCE, 9 \u2014 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0434\u043d\u0430 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438 \u043e\u0434\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043f\u0443\u0444\u0438\u043d\u0433.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\nCVE-2026-56155 (CVSS 7.8) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Active Directory Federation Services. \u042d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0441\u043a\u0438\u0445. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u0442\u043e\u043c, \u0432 \u043a\u0430\u043a\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f.\n\nCVE-2026-56164 (CVSS 5.3) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 Microsoft SharePoint Server, \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0438\u0437\u043a\u0430\u044f, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u043d\u043e \u043a\u0430\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043e. \u0417\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f\u0442 Mandiant/Google, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0451 \u0438 \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f.\n\n\u0422\u0440\u0435\u0442\u0438\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 (\ud83d\ude0f) \u043e\u0431\u0445\u043e\u0434 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f BitLocker CVE-2026-50661 (CVSS 6.1), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043c\u044b \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u0435\u043c \u043a\u0435\u043c.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0430\u0433\u043e\u0432 \u043c\u043d\u043e\u0433\u043e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043b\u0438\u0448\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0440\u043e\u0447\u043d\u044b\u0435. \u0423 \u043f\u0430\u0440\u043e\u0447\u043a\u0438 \u0438\u0437 \u043d\u0438\u0445 CVSS 9.9, \u0438 \u043d\u0438\u0433\u0434\u0435 \u0432 \u044d\u0442\u043e\u043c \u0441\u043f\u0438\u0441\u043a\u0435 \u0446\u0438\u0444\u0440\u0430 \u043d\u0435 \u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043d\u0438\u0436\u0435 9.6.\n\nCVE-2026-57092 \u2014 EoP \u0432 VMSwitch, \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0441 \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 \u0445\u043e\u0441\u0442\u0430.\nCVE-2026-56190 \u2014 RCE \u0432 RDP, \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e \u0441\u0435\u0442\u0438, \u0431\u0435\u0440\u0435\u0433\u0438\u0442\u0435 \u0432\u0430\u0448\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\nCVE-2026-50518 \u2014 RCE \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 DHCP\nCVE-2026-50522 \u0438 -58644 \u2014 RCE \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 SharePoint \nCVE-2026-56188 \u2014 RCE \u0432 WIndows Server network driver\nCVE-2026-55008 \u2014 \u0441\u043f\u0443\u0444\u0438\u043d\u0433 \u0432 Exchange Server (\u043c\u044b \u043d\u0435 \u0437\u043d\u0430\u0435\u043c, \u043f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0441\u043f\u0443\u0444\u0438\u043d\u0433, \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u043d\u044b\u043c \u043f\u043e \u0431\u0435\u043b\u043e\u043c\u0443 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e XSS).\n\n\u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u043f\u0430\u0442\u0447\u0435\u0439 \u0441\u0442\u0430\u043d\u0443\u0442 \u043d\u043e\u0440\u043c\u043e\u0439, \u0431\u0435\u0437 \u0440\u0430\u0434\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0430 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 VM \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0418\u0411 \u0438 \u0418\u0422 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0437\u0430\u043d\u0438\u043c\u0430\u0442\u044c\u0441\u044f \u043d\u0438\u0447\u0435\u043c \u0434\u0440\u0443\u0433\u0438\u043c, \u043e\u0434\u043d\u0438\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u043e\u043c. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2026-07-15T00:00:06.972658Z"}, {"uuid": "b0713edb-4584-43ca-a162-aadf93a4276b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-15T01:00:46.921051Z"}, {"uuid": "d85c0104-a754-42e7-b6f7-71c440246e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:00:53.761994Z"}, {"uuid": "c6e60c70-cd76-4344-8dd5-28cc4cbf8bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:00:53.824957Z"}, {"uuid": "19058715-63e1-45c1-b8b3-2c918c6da952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50520", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:00:53.548812Z"}, {"uuid": "6e9bb8c5-fda9-4f92-acfb-342beca9bc12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:00:54.676020Z"}, {"uuid": "47243c02-5f87-4471-b2e6-435063fcd299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:00:54.543517Z"}, {"uuid": "f3ddf81a-e5cf-41d7-a452-34d5215bd89f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235", "content": "Microsoft heeft kwetsbaarheden verholpen in Developer Tools als .NET en Visual Studio. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot schade uit de categorie\u00ebn zoals genoemd in bijgevoegde tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bronbestand te openen en verwerken in de ontwikkelomgeving.\n\n```\nVisual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47305 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47282 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-45496 | 5.50 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50520 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-57101 | 7.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-57102 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50524 | 7.50 | Denial-of-Service | \n| CVE-2026-50527 | 7.50 | Denial-of-Service | \n| CVE-2026-50646 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50648 | 7.50 | Denial-of-Service | \n| CVE-2026-50650 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47300 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-47303 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50506 | 7.50 | Denial-of-Service | \n| CVE-2026-56170 | 7.50 | Denial-of-Service | \n| CVE-2026-45646 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47302 | 7.50 | Denial-of-Service | \n| CVE-2026-47304 | 8.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50525 | 7.50 | Denial-of-Service | \n| CVE-2026-50526 | 7.00 | Manipulatie van gegevens | \n| CVE-2026-50528 | 8.20 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-50649 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50651 | 7.50 | Denial-of-Service | \n| CVE-2026-50659 | 6.50 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\n.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57108 | 7.50 | Denial-of-Service | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:00:54.617084Z"}, {"uuid": "a6d0895a-2366-4366-a04c-50dd5d60980c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:37.425738Z"}, {"uuid": "83c23f2d-71ac-40b5-a5f5-66e49813a44c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:58.279404Z"}, {"uuid": "a60821ac-d03c-4111-835c-d2535f316c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:00.273389Z"}, {"uuid": "656a071f-2fa3-4094-99f3-882c228e6cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:00.839735Z"}, {"uuid": "7d34e308-a89e-4066-a094-14aff9f8fcc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:56.978143Z"}, {"uuid": "aedb7384-c3a1-4761-8ab2-1815317b6042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:58.005873Z"}, {"uuid": "e1bb2d8b-2ceb-40bf-9ba6-f65ed8954ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50520", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n \n \n \n \n \n \n \n\n\n \n Bulletin ID\n Product\n CVE Count\n Highest Severity\n Highest CVSS\n Exploited\n Deployment Priority\n \n\n\n \n APSB26-82\n Adobe ColdFusion\n 13\n Critical\n 9.9\n No\n 1\n \n \n APSB26-73\n Adobe Commerce\n 13\n Critical\n 9.6\n No\n 2\n \n \n APSB26-78\n Adobe After Effects\n 3\n Critical\n 7.8\n No\n 3\n \n \n APSB26-83\n Adobe Animate\n 6\n Critical\n 8.6\n No\n 3\n \n \n APSB26-71\n Adobe Audition\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-81\n Adobe Bridge\n 6\n Critical\n 7.8\n No\n 3\n \n \n APSB26-77\n Adobe Creative Cloud Desktop Application\n 2\n Critical\n 8.1\n No\n 3\n \n \n APSB26-74\n Adobe Experience Manager\n 13\n Critical\n 9.6\n No\n 3\n \n \n APSB26-79\n Adobe Illustrator\n 5\n Critical\n 9.3\n No\n 3\n \n \n APSB26-72\n Adobe Media Encoder\n 5\n Critical\n 7.8\n No\n 3\n \n \n APSB26-76\n Adobe Premiere Pro\n 4\n Critical\n 7.8\n No\n 3\n \n \n APSB26-80\n Content Credentials SDK\n 12\n Critical\n 8.2\n No\n 3\n \n\n\n \n TOTAL\n 12 bulletins\n 88\n \n \n \n \n \n\n\n\n\n\n \n \n\n\n\n\n\n\n \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n\n \n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n\n \n \n\n\n \n\n\n\n\n\n \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n \n\n\n \n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n CVE\n Title\n Severity\n CVSS\n Public\n Exploited\n Type\n \n \n CVE-2026-56155\n Active Directory\n Federation Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n Yes\n EoP\n \n \n CVE-2026-56164\n Microsoft SharePoint\n Server Elevation of Privilege Vulnerability\n Moderate\n 5.3\n No\n Yes\n EoP\n \n \n CVE-2026-50661\n Windows BitLocker\n Security Feature Bypass Vulnerability\n Important\n 6.1\n Yes\n No\n SFB\n \n \n CVE-2026-54121\n Active Directory\n Certificate Services Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-45499 **\n Azure OpenAI Elevation\n of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-48564\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50370\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56159\n DHCP Server Service\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50382\n DirectX Graphics\n Kernel Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-41106 **\n Microsoft 365 Copilot\n Elevation of Privilege Vulnerability\n Critical\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-26145 **\n Microsoft Azure\n Synapse Elevation of Privilege Vulnerability\n Critical\n 4.8\n No\n No\n EoP\n \n \n CVE-2026-48561\n Microsoft Copilot\n Remote Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-55011\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55012\n Microsoft Defender\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55944\n Microsoft Dynamics NAV\n and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-57100 **\n Microsoft Entra\n Provisioning Service Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55041\n Microsoft Excel Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54998 **\n Microsoft Exchange\n Online Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55008\n Microsoft Exchange\n Server Spoofing Vulnerability\n Critical\n 9.6\n No\n No\n Spoofing\n \n \n CVE-2026-54992\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50314\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50467\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55018\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55022\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55045\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-55049\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55129\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55056\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55140\n Microsoft Office\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55043\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55123\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55120\n Microsoft PowerPoint\n Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50522\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58644\n Microsoft SharePoint\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-55040\n Microsoft SharePoint\n Server Security Feature Bypass Vulnerability\n Critical\n 9.1\n No\n No\n SFB\n \n \n CVE-2026-54117\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54118\n Microsoft SQL Server\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50655\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56189\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-57090\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57094\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57087\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57092\n Microsoft Windows\n VMSwitch Elevation of Privilege Vulnerability\n Critical\n 9.9\n No\n No\n EoP\n \n \n CVE-2026-55033\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55127\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55132\n Microsoft Word Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55010\n Minecraft Bedrock\n Dedicated Server Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50474\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-49164\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-54128\n Windows DHCP Client\n Remote Code Execution Vulnerability\n Critical\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50518\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49796\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50380\n Windows GDI+ Remote\n Code Execution Vulnerability\n Critical\n 9.6\n No\n No\n RCE\n \n \n CVE-2026-54127\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 7.4\n No\n No\n EoP\n \n \n CVE-2026-50680\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Critical\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50327\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58542\n Windows Media Remote\n Code Execution Vulnerability\n Critical\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58608\n Windows Print Spooler\n Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54982\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-54995\n Windows Reliable\n Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-42982\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50392\n Windows Secure Kernel\n Mode Elevation of Privilege Vulnerability\n Critical\n 7\n No\n No\n EoP\n \n \n CVE-2026-50694\n Windows Secure Socket\n Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n Critical\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-56188\n Windows Server Network\n driver Remote Code Execution Vulnerability\n Critical\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50444\n Windows Server Update\n Service (WSUS) Elevation of Privilege Vulnerability\n Critical\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54999\n Windows TCP/IP Remote\n Code Execution Vulnerability\n Critical\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47302\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50525\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50651\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57108\n .NET Denial of Service\n Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50524\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50527\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50648\n .NET Framework Denial\n of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50650\n .NET Framework\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50646\n .NET Framework Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50649\n .NET Remote Code\n Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47304\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.1\n No\n No\n SFB\n \n \n CVE-2026-50528\n .NET Security Feature\n Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-50659\n .NET Spoofing\n Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-50526\n .NET Tampering\n Vulnerability\n Important\n 7\n No\n No\n Tampering\n \n \n CVE-2026-50682\n Active Directory\n Denial of Service Vulnerability\n Important\n 7.1\n No\n No\n DoS\n \n \n CVE-2026-55001\n Active Directory\n Domain Services Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50647\n Active Directory\n Federation Server Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50684\n Active Directory\n Federation Server Spoofing Vulnerability\n Important\n 4.8\n No\n No\n Spoofing\n \n \n CVE-2026-56170\n ASP.NET Core Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-47300\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-47303\n ASP.NET Core Elevation\n of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50652\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50653\n Azure Active Directory\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57969\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58279\n Azure CycleCloud\n Elevation of Privilege Vulnerability\n Important\n 6.5\n No\n No\n EoP\n \n \n CVE-2026-47632\n Azure Monitor Agent\n Metrics Extension Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50338\n Azure Spring Apps\n Elevation of Privilege Vulnerability\n Important\n 8.2\n No\n No\n EoP\n \n \n CVE-2026-50488\n Clipboard User Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50491\n Code Integrity DLL\n (ci.dll) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50381\n Composite Image File\n System driver (cimfs.sys) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50427\n Content Delivery\n Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50692\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58633\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58634\n Desktop Window Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50296\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50375\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-50353\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50493\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56643\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56644\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58629\n DirectX Graphics\n Kernel Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49174\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-50495\n DNS Client Tampering\n Vulnerability\n Important\n 6.1\n No\n No\n Tampering\n \n \n CVE-2026-57088\n Extensible Storage\n Engine (ESENT) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50663\n Game: Age of Empires\n II: Definitive Edition Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-47282\n GitHub Copilot and\n Visual Studio Code Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-41109\n GitHub Copilot and\n Visual Studio Code Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-50510\n GitHub Copilot Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49787\n HTTP.sys Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50420\n HTTP.sys Information\n Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49788\n HTTP/2 Denial of\n Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50696\n Internet Key Exchange\n (IKE) Protocol Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58617\n M365 Copilot for iOS\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-58595\n Microsoft Bing App for\n IOS Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-49162\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50305\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50361\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50466\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50458\n Microsoft Brokering\n File System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50658\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56178\n Microsoft Defender for\n Endpoint for Mac Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50657\n Microsoft Defender for\n Endpoint for Mac Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50329\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58541\n Microsoft DWM Core\n Library Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58596\n Microsoft Edge\n (Chromium-based) Elevation of Privilege Vulnerability\n Important\n 8.3\n No\n No\n EoP\n \n \n CVE-2026-57991\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 7.4\n No\n No\n Info\n \n \n CVE-2026-58291\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57981\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57984\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57985\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.6\n No\n No\n RCE\n \n \n CVE-2026-57986\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57988\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.1\n No\n No\n RCE\n \n \n CVE-2026-57992\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58276\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-56645\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57974\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-57975\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58281\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58284\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58285\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58287\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58288\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.3\n No\n No\n RCE\n \n \n CVE-2026-58289\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 9\n No\n No\n RCE\n \n \n CVE-2026-58290\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58292\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58293\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58294\n Microsoft Edge\n (Chromium-based) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-57983\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.7\n No\n No\n SFB\n \n \n CVE-2026-58295\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.3\n No\n No\n SFB\n \n \n CVE-2026-58525\n Microsoft Edge\n (Chromium-based) Security Feature Bypass Vulnerability\n Important\n 8.2\n No\n No\n SFB\n \n \n CVE-2026-57987\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-58278\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-56646\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-57977\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.1\n No\n No\n Spoofing\n \n \n CVE-2026-57993\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.4\n No\n No\n Spoofing\n \n \n CVE-2026-58282\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58283\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58286\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 8.1\n No\n No\n Spoofing\n \n \n CVE-2026-58298\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 7.2\n No\n No\n Spoofing\n \n \n CVE-2026-58524\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-58296\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58297\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-58300\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-58522\n Microsoft Edge for\n Android Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-58299\n Microsoft Edge for\n Android Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-58523\n Microsoft Edge for\n Android Security Feature Bypass Vulnerability\n Important\n 6.5\n No\n No\n SFB\n \n \n CVE-2026-50678\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.6\n No\n No\n Info\n \n \n CVE-2026-54988\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-48580\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50408\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55046\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55138\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55054\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55122\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55898\n Microsoft Excel\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-50675\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55899\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55948\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58618\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-47642\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55024\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55025\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55031\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55048\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55029\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55039\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55136\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55141\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55036\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55044\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55037\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55058\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55137\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55053\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-54131\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55947\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55949\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56156\n Microsoft Excel Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55006\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55009\n Microsoft Exchange\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55005\n Microsoft Exchange\n Server Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56642\n Microsoft Fabric Data\n Warehouse Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-50343\n Microsoft Install\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50439\n Microsoft Message\n Queuing Queue Manager Remote Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-58537\n Microsoft NAT Helper\n Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56193\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-55023\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55026\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-55027\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55028\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55047\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55035\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55057\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55121\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55042\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55139\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50665\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 7.8\n No\n No\n Info\n \n \n CVE-2026-56192\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56195\n Microsoft Office\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-47290\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50301\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55017\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55125\n Microsoft Office\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55133\n Microsoft OneNote\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58636\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50438\n Microsoft PC Manager\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58647\n Microsoft PowerBI\n Report Server Spoofing Vulnerability\n Important\n 8\n No\n No\n Spoofing\n \n \n CVE-2026-55052\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58277\n Microsoft SharePoint\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-55051\n Microsoft SharePoint\n Server Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54108\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55016\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55019\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55020\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55021\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55030\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-55034\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55126\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 7.3\n No\n No\n Spoofing\n \n \n CVE-2026-55135\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 4.6\n No\n No\n Spoofing\n \n \n CVE-2026-56157\n Microsoft SharePoint\n Server Spoofing Vulnerability\n Important\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-47296\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55002\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-47295\n Microsoft SQL Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50468\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54116\n Microsoft SQL Server\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-42900\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-49784\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50356\n Microsoft Windows App\n Store Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49165\n Microsoft Windows App\n Store Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54993\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58610\n Microsoft Windows\n Media Foundation Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55050\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55124\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55142\n Microsoft Word\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-55032\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55055\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55038\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55134\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55128\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-55130\n Microsoft Word Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50359\n Microsoft XML Core\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-57097\n Microsoft XML Security\n Feature Bypass Vulnerability\n Important\n 6.4\n No\n No\n SFB\n \n \n CVE-2026-50346\n Netlogon RPC Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50402\n NTFS Elevation of\n Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50506\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-45646\n OData for ASP.NET and\n ASP.NET Core Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-54989\n Quality Windows\n Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50365\n Remote Access\n Management service/API (RPC server) Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-54990\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-58594\n Remote Desktop Client\n Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56190\n Remote Desktop\n Protocol Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-49783\n Secure Boot Security\n Feature Bypass Vulnerability\n Important\n 7.8\n No\n No\n SFB\n \n \n CVE-2026-42990\n SQL Server ODBC driver\n Elevation of Privilege Vulnerability\n Important\n 9.8\n No\n No\n EoP\n \n \n CVE-2026-49168\n Storage Spaces Direct\n Elevation of Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-48581\n Surface Broker SDMA\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49180\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50455\n Universal Plug and\n Play (upnp.dll) Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54111\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58543\n Universal Print\n Management Service Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58601\n Virtual Hard Disk\n (VHD) Miniport Driver Elevation of Privilege Vulernability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50520\n Visual Studio Code\n Remote Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-45496\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-57101\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 7.1\n No\n No\n SFB\n \n \n CVE-2026-57102\n Visual Studio Code\n Security Feature Bypass Vulnerability\n Important\n 8.8\n No\n No\n SFB\n \n \n CVE-2026-47305\n Visual Studio Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49805\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50297\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50325\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50489\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57095\n Win32k Elevation of\n Privilege Vulnerability\n Important\n 6.2\n No\n No\n EoP\n \n \n CVE-2026-50416\n Win32k Information\n Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-56184\n Win32k Information\n Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50432\n Window Virtual\n Filtering Platform (VFP) Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-54119\n Windows Active\n Directory Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-57976\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50366\n Windows Active\n Directory Domain Services Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-49178\n Windows Active\n Directory Domain Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-58529\n Windows Active\n Directory Federation Services (ADFS) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-54983\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50695\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50304\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50368\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50324\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 5.9\n No\n No\n DoS\n \n \n CVE-2026-50355\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50411\n Windows Active\n Directory Federation Services Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-58631\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-56196\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56197\n Windows Admin Center\n (WAC) Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-56169\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-57107\n Windows Admin Center\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56185\n Windows Admin Center\n Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50312\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-50462\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57093\n Windows Ancillary\n Function Driver for WinSock Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-34346\n Windows Ancillary\n Function Driver for WinSock Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-48572\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-48571\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50400\n Windows App Package\n Installer Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50331\n Windows Application\n Model Core API Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49803\n Windows AppX\n Deployment Extensions Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50351\n Windows Audio\n Compression Manager (ACM) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50440\n Windows Audio Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34328\n Windows Audio Service\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50406\n Windows Backup Engine\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50364\n Windows Backup Service\n Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-42975\n Windows Bluetooth Port\n Driver Remote Code Execution\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-58538\n Windows Bluetooth\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58638\n Windows Boot Loader\n Security Feature Bypass Vulnerability\n Important\n 6\n No\n No\n SFB\n \n \n CVE-2026-58637\n Windows Client-Side\n Caching Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50384\n Windows Clip Service\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49183\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50689\n Windows Clipboard\n Server Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50374\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 6.3\n No\n No\n EoP\n \n \n CVE-2026-58536\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58613\n Windows Cloud Files\n Mini Filter Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50401\n Windows Cloud Files\n Mini Filter Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50697\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50667\n Windows Common Log\n File System Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50421\n Windows Connected User\n Experiences and Telemetry Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50428\n Windows Container\n Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n Important\n 7.1\n No\n No\n Info\n \n \n CVE-2026-50352\n Windows Cryptographic\n Services Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50302\n Windows Cryptographic\n Services Security Feature Bypass Vulnerability\n Important\n 4.2\n No\n No\n SFB\n \n \n CVE-2026-55144\n Windows Cryptography\n API: Next Generation (CNG) Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-50347\n Windows Data.dll\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49181\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50683\n Windows DHCP Client\n Elevation of Privilege Vulnerability\n Important\n 8\n No\n No\n EoP\n \n \n CVE-2026-58627\n Windows DHCP Server\n Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50685\n Windows DHCP Server\n Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-49807\n Windows DirectX\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-49175\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50487\n Windows DNS Client\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50465\n Windows DNS Client\n Tampering Vulnerability\n Important\n 7.1\n No\n No\n Tampering\n \n \n CVE-2026-49169\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-50426\n Windows DNS Server\n Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50424\n Windows Domain\n Controller Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-50300\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50437\n Windows DWM Core\n Library Information Disclosure \n Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-34348\n Windows Event Logging\n Service Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50502\n Windows Event Logging\n Service Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-33842\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40422\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-41087\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50473\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50442\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50389\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50456\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57084\n Windows File Explorer\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-57091\n Windows File History\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50405\n Windows Filtering\n Platform Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49172\n Windows FTP Service\n Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50387\n Windows GDI Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54122\n Windows GDI+ Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-50483\n Windows Graphics\n Component Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58609\n Windows Graphics\n Component Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50391\n Windows Group Policy\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50310\n Windows Human\n Interface Device Information Disclosure Vulnerability\n Important\n 4.7\n No\n No\n Info\n \n \n CVE-2026-50485\n Windows Hyper-V Denial\n of Service Vulnerability\n Important\n 4.5\n No\n No\n DoS\n \n \n CVE-2026-54129\n Windows Hyper-V\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50315\n Windows Image\n Acquisition Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58534\n Windows Input Method\n Editor (IME) Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50490\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58540\n Windows Installer\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50425\n Windows Internal\n System User Profile Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50293\n Windows Internal Task\n Bar Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49167\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 4.7\n No\n No\n EoP\n \n \n CVE-2026-49173\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54132\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-49795\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-49798\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 9.3\n No\n No\n EoP\n \n \n CVE-2026-49808\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50354\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50332\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50377\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-50390\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50423\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50397\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50436\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50399\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50459\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50477\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50478\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50484\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50673\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58532\n Windows Kernel\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50294\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 6.2\n No\n No\n Info\n \n \n CVE-2026-50316\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50419\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 3.3\n No\n No\n Info\n \n \n CVE-2026-50463\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50475\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50429\n Windows Kernel\n Information Disclosure Vulnerability\n Important\n 8.2\n No\n No\n Info\n \n \n CVE-2026-58614\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58545\n Windows Kernel\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-58602\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50393\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50396\n Windows Kernel-Mode\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50378\n Windows Key Guard\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50303\n Windows Key Guard\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-40378\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 7.5\n No\n No\n DoS\n \n \n CVE-2026-49799\n Windows Local Security\n Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50371\n Windows LUA File\n Virtualization Filter Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58544\n Windows Management\n Services Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50404\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50358\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50336\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50398\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50414\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50379\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50433\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50676\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50677\n Windows Media\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-34349\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50394\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50415\n Windows Media\n Information Disclosure Vulnerability\n Important\n 5.3\n No\n No\n Info\n \n \n CVE-2026-57083\n Windows Media Photo\n Codec Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-54115\n Windows Message\n Queuing (MSMQ) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50447\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 9.8\n No\n No\n RCE\n \n \n CVE-2026-50505\n Windows Message\n Queuing Service (MSMQ) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50342\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56183\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56187\n Windows MIDI Service\n Module Elevation of Privileges Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58635\n Windows Narrator\n Braille Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50500\n Windows Netlogon\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50476\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50450\n Windows Network\n Connections Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56650\n Windows Network File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56649\n Windows Network File\n System Remote Code Execution Vulnerability\n Important\n 5.9\n No\n No\n RCE\n \n \n CVE-2026-50470\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-50496\n Windows Network Policy\n Server SNMP Information Disclosure Vulnerability\n Important\n 7.5\n No\n No\n Info\n \n \n CVE-2026-56194\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56648\n Windows NFS Server\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50337\n Windows Notification\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49789\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50412\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50422\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50672\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-56175\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56182\n Windows NTFS Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50341\n Windows NTFS\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-58640\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-49184\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 8.4\n No\n No\n RCE\n \n \n CVE-2026-49797\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50308\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50386\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50309\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50313\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50388\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50448\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50471\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50461\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50417\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50482\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.3\n No\n No\n RCE\n \n \n CVE-2026-50494\n Windows NTFS Remote\n Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50344\n Windows OLE Elevation\n of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50686\n Windows OLE Remote\n Code Execution Vulnerability\n Important\n 8.1\n No\n No\n RCE\n \n \n CVE-2026-50335\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50317\n Windows Operating\n Systems Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54987\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50435\n Windows Overlay Filter\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50409\n Windows Overlay Filter\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-40400\n Windows PowerShell\n Remote Code Execution Vulnerability\n Important\n 8\n No\n No\n RCE\n \n \n CVE-2026-49166\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55004\n Windows Print\n Configuration Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50499\n Windows Print Spooler\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50383\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-57085\n Windows Print Spooler\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50469\n Windows Projected File\n System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50434\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50339\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50430\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50334\n Windows Push\n Notification Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-44800\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50363\n Windows Push\n Notifications Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50431\n Windows Quality of\n Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50372\n Windows Redirected\n Drive Buffering System Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50666\n Windows Remote Access\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56647\n Windows Remote Access\n Service Infrastructure Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50330\n Windows Remote Desktop\n Client Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-50376\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50504\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58533\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58535\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58546\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-58539\n Windows Remote Desktop\n Client Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-55003\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57979\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50445\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50497\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-54126\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-57982\n Windows Remote Desktop\n Protocol (RDP) Information Disclosure Vulnerability\n Important\n 6.5\n No\n No\n Info\n \n \n CVE-2026-50369\n Windows Remote Desktop\n Services Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-58626\n Windows Remote Desktop\n Services Remote Code Execution Vulnerability\n Important\n 8.8\n No\n No\n RCE\n \n \n CVE-2026-55014\n Windows Remote Help\n Defense Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50318\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50407\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50357\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50441\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50668\n Windows Resilient File\n System (ReFS) Elevation of Privilege Vulnerability\n Important\n 6.8\n No\n No\n EoP\n \n \n CVE-2026-54109\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49792\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49793\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50362\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50492\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-50501\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-58530\n Windows Resilient File\n System (ReFS) Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-49791\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-50451\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.1\n No\n No\n EoP\n \n \n CVE-2026-57096\n Windows Routing and\n Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50323\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50452\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50348\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50345\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50322\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50340\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.5\n No\n No\n EoP\n \n \n CVE-2026-50410\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50449\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50460\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.1\n No\n No\n EoP\n \n \n CVE-2026-50403\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50385\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50413\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50457\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50486\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50503\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54125\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58527\n Windows Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50373\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50679\n Windows Search Service\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-44806\n Windows Secure Channel\n Denial of Service Vulnerability\n Important\n 5.3\n No\n No\n DoS\n \n \n CVE-2026-50681\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56186\n Windows Secure Channel\n Information Disclosure Vulnerability\n Important\n 8.1\n No\n No\n Info\n \n \n CVE-2026-50367\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58619\n Windows Sensor Data\n Service Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50311\n Windows Server\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50328\n Windows Server Update\n Service (WSUS) Tampering Vulnerability\n Important\n 7.5\n No\n No\n Tampering\n \n \n CVE-2026-58531\n Windows SMB Elevation\n of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-54997\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-49801\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50690\n Windows SMB\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-56168\n Windows SMB Server\n Denial of Service Vulnerability\n Important\n 6.5\n No\n No\n DoS\n \n \n CVE-2026-50360\n Windows SMB Server\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-57089\n Windows SMB Server\n Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n Important\n 7.5\n No\n No\n RCE\n \n \n CVE-2026-50333\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50298\n Windows Spaceport.sys\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49171\n Windows Speech Runtime\n Elevation of Privilege Vulnerability\n Important\n 7.5\n No\n No\n EoP\n \n \n CVE-2026-49170\n Windows\n StateRepository API Server file Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58526\n Windows Storage\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50299\n Windows Storage Spaces\n Direct Remote Code Execution Vulnerability\n Important\n 6.8\n No\n No\n RCE\n \n \n CVE-2026-57968\n Windows Subsystem for\n Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-57973\n Windows Subsystem for\n Linux (WSL2) Kernel Tampering Vulnerability\n Important\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-50418\n Windows System Secure\n Feature Bypass Vulnerability\n Important\n 5.1\n No\n No\n SFB\n \n \n CVE-2026-50306\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50307\n Windows TCP/IP\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49177\n Windows TCP/IP\n Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50669\n Windows Telephony\n Server Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-54124\n Windows Terminal\n Remote Code Execution Vulnerability\n Important\n 7.8\n No\n No\n RCE\n \n \n CVE-2026-50350\n Windows Trusted\n Runtime Interface Driver Information Disclosure Vulnerability\n Important\n 5.5\n No\n No\n Info\n \n \n CVE-2026-50326\n Windows Unified\n Consent System Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49790\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.3\n No\n No\n EoP\n \n \n CVE-2026-50498\n Windows Universal Disk\n Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58547\n Windows Universal Plug\n and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n Important\n 5.5\n No\n No\n EoP\n \n \n CVE-2026-49794\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 4.6\n No\n No\n Info\n \n \n CVE-2026-50453\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.1\n No\n No\n Info\n \n \n CVE-2026-58528\n Windows USB Audio\n Class Driver Information Disclosure Vulnerability\n Important\n 6.8\n No\n No\n Info\n \n \n CVE-2026-50321\n Windows USB Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50479\n Windows USB Hub Driver\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55000\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 6.4\n No\n No\n EoP\n \n \n CVE-2026-54991\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54996\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49802\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49806\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-50674\n Windows USB Print\n Driver Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-49804\n Windows USB Video\n Driver Elevation of Privilege Vulnerability\n Important\n 6.6\n No\n No\n EoP\n \n \n CVE-2026-50454\n Windows User Interface\n Core Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49176\n Windows WalletService\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-49800\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50480\n Windows Web Proxy\n Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-56173\n Windows WebView\n Elevation of Privilege Vulnerability\n Important\n 7\n No\n No\n EoP\n \n \n CVE-2026-58632\n Windows Win32 Kernel\n Subsystem Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54107\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-54986\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54112\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-54114\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50670\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-50688\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50687\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 8.8\n No\n No\n EoP\n \n \n CVE-2026-56176\n Windows Win32k\n Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-58628\n Windows Wireless\n Network Manager Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-50295\n Windows Zero Trust DNS\n Security Feature Bypass Vulnerability\n Important\n 5.5\n No\n No\n SFB\n \n \n CVE-2026-50509\n Wireless Wide Area\n Network Service (WwanSvc) Elevation of Privilege Vulnerability\n Important\n 7.8\n No\n No\n EoP\n \n \n CVE-2026-55945\n Microsoft Edge\n (Chromium-based) Information Disclosure Vulnerability\n Moderate\n 4.2\n No\n No\n Info\n \n \n CVE-2026-45488\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 5.4\n No\n No\n Spoofing\n \n \n CVE-2026-45489\n Microsoft Edge\n (Chromium-based) Spoofing Vulnerability\n Moderate\n 6.5\n No\n No\n Spoofing\n \n \n CVE-2026-55145\n Outlook Copilot\n Tampering Vulnerability\n Moderate\n 6.3\n No\n No\n Tampering\n \n \n CVE-2026-56181\n Windows Network\n Address Translation (NAT) Spoofing Vulnerability\n Moderate\n 8.3\n No\n No\n Spoofing\n \n \n CVE-2026-58597\n Microsoft\n Edge (Chromium-based) Spoofing Vulnerability\n Low\n 4.3\n No\n No\n Spoofing\n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n \n \n\n\n\n\n\n\n \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:59.550007Z"}, {"uuid": "0266d664-bd7b-402e-ba93-85f746284a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqcnqveuf2h", "content": "\ud83d\udccc CVE-2026-50522 - Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-50522", "creation_timestamp": "2026-07-16T03:37:07.062096Z"}, {"uuid": "51d4bae7-1b50-4505-b1f5-3d89b51117b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50527", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:48:13.474530Z"}, {"uuid": "8f46dc1a-9eaf-473a-b620-4c04ff7148bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50520", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:48:04.731985Z"}, {"uuid": "0dd51d1a-2663-4e04-b595-9655820cdb65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:48:15.715012Z"}, {"uuid": "d46da041-1bb9-4725-8e62-f9e9f39c0195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:48:22.269728Z"}, {"uuid": "b3d1fd1f-4512-4ae3-8426-951aadf4c261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:48:35.543566Z"}, {"uuid": "18b00696-05af-4908-a852-b34601ebb039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50526", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:48:44.874713Z"}, {"uuid": "9909b9ab-24f9-47d2-9df0-a066c503dee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:49:13.955520Z"}, {"uuid": "148c519f-d469-41eb-afec-33b0e5d9f3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nUPDATE: \nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-17T10:00:44.720013Z"}, {"uuid": "532befb7-8dbe-4177-8114-e465173e1571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50520", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqu3e4xa3n2v", "content": "\ud83d\udccc CVE-2026-50520 - Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute c... https://www.cyberhub.blog/cves/CVE-2026-50520", "creation_timestamp": "2026-07-17T15:37:06.682432Z"}, {"uuid": "50f48244-a4cf-4a40-979f-eb0f3980720b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nUPDATE: \nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-18T01:00:45.548670Z"}, {"uuid": "24807fed-a522-43f8-b86c-9f45a7ce967a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50521", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqwgs4wvk623", "content": "\ud83d\udccc CVE-2026-50521 - Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-50521", "creation_timestamp": "2026-07-18T14:07:07.145916Z"}, {"uuid": "ad3aafa8-bf6d-49fc-b57a-16176d602fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50528", "type": "seen", "source": "https://gist.github.com/alon710/ea5ca4436c8fd784e72f6c027234ed53", "content": "# CVE-2026-50528: CVE-2026-50528: Security Feature Bypass via State Desynchronization in .NET SslStream\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-50528\n\n## Summary\nA security feature bypass vulnerability exists in the .NET runtime's SslStream component. The flaw is caused by a state synchronization mismatch during Transport Layer Security (TLS) renegotiation or Post-Handshake Authentication (PHA). When renegotiation with a client fails due to an invalid or missing client certificate, the managed SslStream wrapper fails to invalidate its previously cached authentication properties. Consequently, downstream application logic continues to authorize requests under the context of the original valid identity, leading to incorrect authorization and authentication bypass.\n\n## TL;DR\nA critical state desynchronization vulnerability in .NET's SslStream allows remote attackers to bypass mutual TLS (mTLS) policies. An attacker authenticates with a valid client certificate, requests renegotiation with an invalid or empty certificate, and relies on the server failing to clear its cached validation credentials to transmit unauthorized payloads over the unauthenticated connection.\n\n## Technical Details\n\n- **CWE ID**: CWE-863 (Primary), CWE-302, CWE-636\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 8.2\n- **EPSS Score**: 0.00436\n- **EPSS Percentile**: 35.41%\n- **Impact**: Security Feature Bypass\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- .NET 8.0\n- .NET 9.0\n- .NET 10.0\n- Visual Studio 2022\n- **.NET 8.0**: 8.0.0 to < 8.0.29 (Fixed in: `8.0.29`)\n- **.NET 9.0**: 9.0.0 to < 9.0.18 (Fixed in: `9.0.18`)\n- **.NET 10.0**: 10.0.0 to < 10.0.6 (Fixed in: `10.0.6`)\n- **Visual Studio 2022 version 17.12**: 17.12.0 to < 17.12.22 (Fixed in: `17.12.22`)\n- **Visual Studio 2022 version 17.14**: 17.14.0 to < 17.14.36 (Fixed in: `17.14.36`)\n\n## Mitigation\n\n- Upgrade the .NET runtime and SDK packages to the latest patched releases.\n- Restrict supported TLS protocols to TLS 1.3 on all mutually authenticated endpoints to mitigate renegotiation flaws.\n- Implement application-level tracking of connection validation states within callbacks.\n\n**Remediation Steps:**\n1. Identify all deployment targets utilizing .NET 8.0, 9.0, or 10.0 runtime engines.\n2. Update .NET SDK and hosting bundles to 8.0.29, 9.0.18, or 10.0.6 respectively.\n3. Review custom implementation of RemoteCertificateValidationCallback to ensure it does not bypass verification on resumed sessions.\n4. Apply OS-level transport layer policies to disable client-initiated TLS renegotiation globally on vulnerable servers.\n\n## References\n\n- [Microsoft Security Response Center (MSRC) Advisory](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-50528)\n- [NVD Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-50528)\n- [Wiz Vulnerability Analysis](https://www.wiz.io/vulnerability-database/cve/cve-2026-50528)\n- [Shodan CVEDB Entry](https://www.shodan.io/search?query=CVE-2026-50528)\n- [GitHub Commit 9db47f0b](https://github.com/dotnet/runtime/commit/9db47f0b4f02e0804f4b16958f1c70068b95e7c3)\n- [GitHub Commit 013aa090](https://github.com/dotnet/runtime/commit/013aa09028a670051e21cb7bd6d96cb1d761ac5d)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-50528) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-20T23:31:18.485087Z"}, {"uuid": "8cd41753-59b5-4858-a120-f8740726d2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50528", "type": "seen", "source": "https://gist.github.com/alon710/ea5ca4436c8fd784e72f6c027234ed53", "content": "# CVE-2026-50528: CVE-2026-50528: Security Feature Bypass via State Desynchronization in .NET SslStream\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-50528\n\n## Summary\nA security feature bypass vulnerability exists in the .NET runtime's SslStream component. The flaw is caused by a state synchronization mismatch during Transport Layer Security (TLS) renegotiation or Post-Handshake Authentication (PHA). When renegotiation with a client fails due to an invalid or missing client certificate, the managed SslStream wrapper fails to invalidate its previously cached authentication properties. Consequently, downstream application logic continues to authorize requests under the context of the original valid identity, leading to incorrect authorization and authentication bypass.\n\n## TL;DR\nA critical state desynchronization vulnerability in .NET's SslStream allows remote attackers to bypass mutual TLS (mTLS) policies. An attacker authenticates with a valid client certificate, requests renegotiation with an invalid or empty certificate, and relies on the server failing to clear its cached validation credentials to transmit unauthorized payloads over the unauthenticated connection.\n\n## Technical Details\n\n- **CWE ID**: CWE-863 (Primary), CWE-302, CWE-636\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 8.2\n- **EPSS Score**: 0.00436\n- **EPSS Percentile**: 35.41%\n- **Impact**: Security Feature Bypass\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- .NET 8.0\n- .NET 9.0\n- .NET 10.0\n- Visual Studio 2022\n- **.NET 8.0**: 8.0.0 to < 8.0.29 (Fixed in: `8.0.29`)\n- **.NET 9.0**: 9.0.0 to < 9.0.18 (Fixed in: `9.0.18`)\n- **.NET 10.0**: 10.0.0 to < 10.0.6 (Fixed in: `10.0.6`)\n- **Visual Studio 2022 version 17.12**: 17.12.0 to < 17.12.22 (Fixed in: `17.12.22`)\n- **Visual Studio 2022 version 17.14**: 17.14.0 to < 17.14.36 (Fixed in: `17.14.36`)\n\n## Mitigation\n\n- Upgrade the .NET runtime and SDK packages to the latest patched releases.\n- Restrict supported TLS protocols to TLS 1.3 on all mutually authenticated endpoints to mitigate renegotiation flaws.\n- Implement application-level tracking of connection validation states within callbacks.\n\n**Remediation Steps:**\n1. Identify all deployment targets utilizing .NET 8.0, 9.0, or 10.0 runtime engines.\n2. Update .NET SDK and hosting bundles to 8.0.29, 9.0.18, or 10.0.6 respectively.\n3. Review custom implementation of RemoteCertificateValidationCallback to ensure it does not bypass verification on resumed sessions.\n4. Apply OS-level transport layer policies to disable client-initiated TLS renegotiation globally on vulnerable servers.\n\n## References\n\n- [Microsoft Security Response Center (MSRC) Advisory](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-50528)\n- [NVD Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-50528)\n- [Wiz Vulnerability Analysis](https://www.wiz.io/vulnerability-database/cve/cve-2026-50528)\n- [Shodan CVEDB Entry](https://www.shodan.io/search?query=CVE-2026-50528)\n- [GitHub Commit 9db47f0b](https://github.com/dotnet/runtime/commit/9db47f0b4f02e0804f4b16958f1c70068b95e7c3)\n- [GitHub Commit 013aa090](https://github.com/dotnet/runtime/commit/013aa09028a670051e21cb7bd6d96cb1d761ac5d)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-50528) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T00:00:01.217842Z"}, {"uuid": "3e2e5a87-d263-4705-8a16-ec80e8a20dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mr5mrsc4gj2b", "content": "Exploitation Alert: watchTowr is observing active exploitation of CVE-2026-50522 against on-premise Microsoft SharePoint deployments following the release of public exploit code, with attackers stealing machine keys\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2079512810766106905)", "creation_timestamp": "2026-07-21T10:42:56.911191Z"}, {"uuid": "caf31dfa-c02b-477c-8d8c-e60d6e7c293b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/82969677-7927-4d0b-9056-c5fe9ce59e97", "content": "", "creation_timestamp": "2026-07-21T11:00:47.624942Z"}, {"uuid": "e1fa60a7-875a-4910-9914-75b04eb65fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr5tolmtr22r", "content": "CVE-2026-50522 SharePoint RCE vulnerability exploited in the wild with public PoC exploitCVE-2026-50522, a critical SharePoint RCE flaw, is exploited in the wild. A public PoC exploit is out, so admins should patch SharePoint now.\n\n#CVE202650522 #SharePoint #RCE #Deserialization #Microsoft #PoC\u2026", "creation_timestamp": "2026-07-21T12:46:25.270315Z"}, {"uuid": "c10b6db0-80ab-44d8-862d-60e84cd7d6fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mr63ti3zpc2t", "content": "CVE-2026-50522 in SharePoint is actively exploited; patch immediately to prevent unauthorized access. #CyberSecurity #SharePoint #CVE202650522 #Microsoft #InfoSec #Vulnerability thedailytechfeed.com/critical-sha...", "creation_timestamp": "2026-07-21T15:12:19.168765Z"}, {"uuid": "2bfc8e03-b850-407b-b672-008648788185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/fabiansilva.bsky.social/post/3mr63txtoxt2n", "content": "\ud83d\udcf0 THN: Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC PentestHQ #SharePoint #CVE202650522 #CyberSecurity #RCE #Vulnerability", "creation_timestamp": "2026-07-21T15:12:35.737546Z"}, {"uuid": "cd84c9c2-0250-4f3f-9830-77043bb605ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mr63ykqljn2w", "content": "CVE-2026-50522 enables remote code execution in SharePoint Server via untrusted deserialization, and active exploitation has been detected with machine-key theft for persistence.\n", "creation_timestamp": "2026-07-21T15:15:10.063838Z"}, {"uuid": "4b32bea2-190d-495e-a279-9430dc9f33d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr64luvyle2l", "content": "Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC", "creation_timestamp": "2026-07-21T15:25:58.020240Z"}, {"uuid": "4f3525f7-8e41-4bdb-a0df-a8b4cf09e919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50525", "type": "seen", "source": "https://gist.github.com/alon710/d9fa265e1e5522e84729db91206367fe", "content": "# CVE-2026-50525: CVE-2026-50525: Denial of Service Vulnerability in Microsoft .NET XML Cryptography Stack\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-50525\n\n## Summary\nCVE-2026-50525 is a high-severity Denial of Service (DoS) vulnerability in the Microsoft .NET XML Cryptography stack. The vulnerability resides in the `System.Security.Cryptography.Xml` library, specifically within the `EncryptedXml` processing engine. Unauthenticated remote attackers can exploit this flaw by sending specifically crafted XML documents containing nested or recursive structures, or utilizing resource-intensive transforms. Processing such payloads leads to infinite CPU loops, stack exhaustion, or memory starvation, resulting in application termination.\n\n## TL;DR\nA Denial of Service vulnerability in Microsoft .NET allows unauthenticated remote attackers to crash applications by submitting XML payloads containing deeply nested cryptographic elements or infinite XSLT loops.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 7.5 (High)\n- **Exploit Maturity**: Proof of Concept\n- **Impact**: Denial of Service (DoS)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Microsoft .NET 10.0\n- Microsoft .NET 9.0\n- Microsoft .NET 8.0\n- Microsoft .NET Framework 3.5\n- Microsoft .NET Framework 4.6.2\n- Microsoft .NET Framework 4.7\n- Microsoft .NET Framework 4.7.1\n- Microsoft .NET Framework 4.7.2\n- Microsoft .NET Framework 4.8\n- Microsoft .NET Framework 4.8.1\n- Microsoft Visual Studio 2022 v17.12\n- Microsoft Visual Studio 2022 v17.14\n- Microsoft Visual Studio 2026 v18.7\n- **.NET**: >= 10.0.0, < 10.0.6 (Fixed in: `10.0.6`)\n- **.NET**: >= 9.0.0, < 9.0.18 (Fixed in: `9.0.18`)\n- **.NET**: >= 8.0.0, < 8.0.29 (Fixed in: `8.0.29`)\n\n## Mitigation\n\n- Upgrade .NET Framework and .NET Core runtime hosting environments to the latest patched security baselines.\n- Update application dependencies for System.Security.Cryptography.Xml to version 8.0.1 or higher.\n- Enforce strict input file size and nesting limits on API endpoints that process incoming XML formats.\n- Deploy WAF rules to detect and reject XML documents containing embedded XSLT transformations or complex XPath patterns.\n\n**Remediation Steps:**\n1. Identify all production servers running vulnerable versions of .NET (8.0, 9.0, 10.0, and .NET Framework).\n2. Apply the July 2026 Microsoft Security Update to the server OS or upgrade .NET runtimes.\n3. Verify that the `System.Security.Cryptography.Xml.AllowDangerousEncryptedXmlTransforms` AppContext switch is set to `false` in production settings.\n4. Optionally set `System.Security.Cryptography.Xml.DangerousMaxRecursionDepth` to a restrictive value (e.g. 16 or 32) in runtimeconfig.json for enhanced validation.\n\n## References\n\n- [Microsoft Security Update Guide - CVE-2026-50525](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-50525) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T15:32:00.025428Z"}, {"uuid": "5af854d3-3946-422d-936f-6bfd885d0ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mr65gmyymy2l", "content": "Microsoft SharePoint Under Attack Again: Critical CVE-2026-50522 Exploited in the Wild as Attackers Target Enterprise Servers +\u00a0Video\n\nIntroduction: A New SharePoint Crisis Raises Fresh Security Concerns Microsoft SharePoint has become a major target for cybercriminals as attackers continue\u2026", "creation_timestamp": "2026-07-21T15:40:55.578129Z"}, {"uuid": "c7980451-16da-454d-9739-ee1bef5d1433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "https://t.me/ctinow/253706", "content": "Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC\nhttps://ift.tt/4SVFayw", "creation_timestamp": "2026-07-21T16:00:07.143976Z"}, {"uuid": "89472ca4-5cca-4d96-9b59-146eb8c4f6e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\nUPDATE:\nVolgens watchTowr is er een publieke exploit code voor SharePoint kwetsbaarheid CVE-2026-50522 gepubliceerd en wordt deze op on-premise versies van SharePoint nu ook actief misbruikt. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken om zichzelf voor langere termijn toegang tot netwerken van kwetsbare systemen te verschaffen, door middel van het stelen van machine-keys. \n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-21T16:00:48.532964Z"}, {"uuid": "11c0e3ea-1e88-4479-a875-2732f725c306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-sharepoint-rce-cve-2026-50522.html", "content": "A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr.\n\nThe vulnerability in question is CVE-2026-50522 (CVSS score: 9.8), a critical deserialization of untrusted data in Microsoft Office SharePoint that could allow an unauthorized attacker to execute code over a network. Microsoft credited DEVCORE", "creation_timestamp": "2026-07-21T16:00:55.731905Z"}, {"uuid": "8b3e1c3a-5a99-45d6-b103-6682ab82fdb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-july-2026-monthly-rollup-av26-698", "content": "", "creation_timestamp": "2026-07-21T16:15:11.707044Z"}, {"uuid": "b0d74861-7e49-403d-b841-8ff71850c9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50522", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mr6akcj4jc2o", "content": "\ud83e\udd16 CVE-2026-50522 (CVSS 9.8): Critical deserialization RCE in Microsoft SharePoint Server exploited in the wild. PoC published by watchTowr.\nhttps://thehackernews.com/2026/07/critical-sharepoint-rce-cve-2026-50522.html", "creation_timestamp": "2026-07-21T16:36:39.646454Z"}, {"uuid": "45a35fad-3785-4e18-b736-349cb353c5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/12029", "content": "Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC \u2013 thehackernews.com\n\nTue, 21 Jul 2026 22:57:51", "creation_timestamp": "2026-07-21T17:00:03.948592Z"}, {"uuid": "1ac5d47a-3406-48e1-a87a-50f3afe50be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mr6chckqqe2u", "content": "Here we go again, as on-premises SharePoint deployments get battered by active attacks exploiting critical deserialization flaw CVE-2026-50522 because public proof-of-concept code was conveniently released. Poor sysadmins managing these exposed servers now face the utter delight ...\n\nRead full story", "creation_timestamp": "2026-07-21T17:10:46.653848Z"}, {"uuid": "f72c72e1-9698-4fc8-ba41-cc7bcdaabf67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mr6feritul2o", "content": "\ud83d\udd12 Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC\n\nA third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July...\n\nhttps://tinyurl.com/2dgvrm9l #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-07-21T18:03:05.742112Z"}, {"uuid": "7ef375cb-2f64-44e2-9479-381e2031fe67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "Telegram/rF1AyL__EsQf9zKcvIF2zKFvNE9SeKF-HuB6IhMAZmjMTQ", "content": "", "creation_timestamp": "2026-07-21T19:00:06.338785Z"}, {"uuid": "7bef1e61-e193-440e-b23f-880c9c025b69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mr6mctnonp2l", "content": "Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched.", "creation_timestamp": "2026-07-21T20:07:14.386199Z"}, {"uuid": "e1ad4a3d-fe30-4844-9a87-b750f9e99185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mr6ntmnha62k", "content": "Attackers are exploiting CVE-2026-50522 in Microsoft SharePoint to steal machine keys and retain access after servers are patched.", "creation_timestamp": "2026-07-21T20:34:31.096054Z"}, {"uuid": "7cab4b58-48ff-422e-afab-87a352fc53a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3mr6oquat2z2m", "content": "Vulnerabilidad cr\u00edtica en SharePoint permite robo de claves de m\u00e1quina\n\nHackers explotan la falla CVE-2026-50522 en Microsoft SharePoint para robar claves de\u2026\n\nhttps://mentehackers.com/vulnerabilidad-sharepoint-robo-claves-5788b4c6\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-07-21T20:50:52.762865Z"}, {"uuid": "cea5489e-f40d-47f8-a2d4-0b769c9a67fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mr6pr4s6qp2j", "content": "Critical SharePoint RCE flaw exploited to steal machine keys\nHackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are\u2026\n\n\ud83d\udd17 https://hnow.live/a/0e6632df", "creation_timestamp": "2026-07-21T21:08:54.730903Z"}, {"uuid": "7ec3d6b0-c01e-4a31-9fea-9a64a95510bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mr6sxgkrjq2m", "content": "Microsoft SharePoint Under Fire: Critical CVE-2026-50522 Exploited Within Hours as Attackers Target Enterprise Servers Worldwide +\u00a0Video\n\nIntroduction, A Dangerous Reminder That Patching Alone Is No Longer Enough Microsoft SharePoint remains one of the most widely deployed collaboration platforms\u2026", "creation_timestamp": "2026-07-21T22:06:07.944397Z"}, {"uuid": "aa81eb05-9ce4-4171-af64-f0c8b48ea652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr6tnpgorx2u", "content": "Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522", "creation_timestamp": "2026-07-21T22:18:35.048031Z"}, {"uuid": "130c1eb0-296c-4ec1-842c-17fa9bf9d7d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/smartdeals.bsky.social/post/3mr6uicombw2j", "content": "Breaking: CVE-2026-50522 exploits are on the rise! Protect your data with the latest security patches and robust backup solutions like Western Digital My Book #CyberSecurity #SharePoint", "creation_timestamp": "2026-07-21T22:33:27.978113Z"}, {"uuid": "71260ccf-3b55-4862-850f-c724ba301898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "Telegram/EtQ6Rf2wP6ZLrhnMv3YBuP7DSLx3B_D-jg06PKXCN1gb5K63", "content": "", "creation_timestamp": "2026-07-21T23:00:04.150414Z"}, {"uuid": "85061579-991c-4f3c-99f9-4192a1406bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://t.me/ctinow/253738", "content": "Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522\nhttps://ift.tt/GatQA0z", "creation_timestamp": "2026-07-21T23:00:04.199594Z"}, {"uuid": "66604eea-58b7-4efe-ad03-d68851587565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mr6yiwnfks2u", "content": "Active exploitation of CVE-2026-50522 in Microsoft SharePoint is stealing machine keys, enabling forged tokens and persistent access on vulnerable on-prem servers after patching. #SharePoint #Microsoft #CVE2026-50522", "creation_timestamp": "2026-07-21T23:45:24.161232Z"}, {"uuid": "d1c8ba6a-aaa6-4ae3-b2fd-b59e9b56c069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "https://t.me/ctinow/253738", "content": "Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522\nhttps://ift.tt/GatQA0z", "creation_timestamp": "2026-07-22T00:00:03.445729Z"}, {"uuid": "fa8bd536-67d4-4cf7-9048-c2412223ef84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "Telegram/EtQ6Rf2wP6ZLrhnMv3YBuP7DSLx3B_D-jg06PKXCN1gb5K63", "content": "", "creation_timestamp": "2026-07-22T00:00:03.490806Z"}, {"uuid": "98502cf3-47d3-48c4-9efb-b35404c352fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "Telegram/rF1AyL__EsQf9zKcvIF2zKFvNE9SeKF-HuB6IhMAZmjMTQ", "content": "", "creation_timestamp": "2026-07-22T00:00:07.095233Z"}, {"uuid": "2918c2de-f92d-4c0a-9607-aca376d2f700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/12029", "content": "Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC \u2013 thehackernews.com\n\nTue, 21 Jul 2026 22:57:51", "creation_timestamp": "2026-07-22T00:00:07.587653Z"}, {"uuid": "e5d366ab-bd54-4bee-b9d9-8d9fde7215ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "https://t.me/ctinow/253706", "content": "Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC\nhttps://ift.tt/4SVFayw", "creation_timestamp": "2026-07-22T00:00:21.685296Z"}, {"uuid": "83238a9f-9fc1-4a23-b7e1-2ebb97765905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/jqjousatechenglish.bsky.social/post/3mr6zubwdfk23", "content": "United States hackers exploit critical SharePoint vulnerability\n\nUS hackers exploit critical SharePoint flaw (CVE-2026-50522). This allows unauthenticated code execution, risking unpatched on-premises deployments nationwide.\n\n#SharePointHack #CyberSecurity #Microsoft #CVE202650522 #DataBreach #Br...", "creation_timestamp": "2026-07-22T00:09:39.077905Z"}, {"uuid": "566759e6-ac17-4200-842a-0f035ef7728a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr725s6g4r2m", "content": "CVE-2026-50522: SharePoint\u2019s Deserialization Flaw is an Immediate Threat #CVE202650522 #SharePoint #CyberSecurity", "creation_timestamp": "2026-07-22T00:14:58.205988Z"}, {"uuid": "452c4add-733a-47e8-ab17-45e3fae02e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr725tqtzj2v", "content": "CVE-2026-50522: Active Exploitation of SharePoint RCE Demands Urgent Action #CVE202650522 #SharePoint #CyberSecurity", "creation_timestamp": "2026-07-22T00:14:59.479778Z"}, {"uuid": "929c08f8-e255-4f93-9bc9-8f9b134740ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr725vd2hr2v", "content": "CVE-2026-50522: Microsoft\u2019s SharePoint Vulnerability Reveals Security Gaps #CVE202650522 #MicrosoftSharePoint #CyberSecurity", "creation_timestamp": "2026-07-22T00:15:01.047768Z"}, {"uuid": "9f838721-aa71-4aa1-adc2-04ddf658645f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr725wz42v2y", "content": "CVE-2026-50522: Skepticism Surrounds Public PoC Exploitation of SharePoint #CVE202650522 #SharePoint #CyberSecurity", "creation_timestamp": "2026-07-22T00:15:03.150102Z"}, {"uuid": "1ab2d680-98e4-40ae-9065-687821e36f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr725z25ai2l", "content": "CVE-2026-50522: Microsoft SharePoint Leaks Again as PoC Fuels Exploits #CVE202650522 #MicrosoftSharePoint #Cybersecurity", "creation_timestamp": "2026-07-22T00:15:04.829953Z"}, {"uuid": "3d93e113-791a-4f5e-8e02-6a1dcea7203a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr7262s3ug2m", "content": "CVE-2026-50522: Containment Urgency or Strategic Vulnerability Management? #Cybersecurity #VulnerabilityManagement #CVE2026", "creation_timestamp": "2026-07-22T00:15:06.662380Z"}, {"uuid": "c2520cb3-f44e-4650-8d71-fcf62e5b6145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mr72yox2xl2b", "content": "Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-07-22T00:30:00.795707Z"}, {"uuid": "f00e1159-6409-451e-8702-caf1f236c0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mr73skebxb23", "content": "\ud83e\udd16 CVE-2026-50522 (Critical): Microsoft SharePoint RCE actively exploited. Attackers steal machine keys for persistence post-patch.\nhttps://www.bleepingcomputer.com/news/security/critical-sharepoint-rce-flaw-exploited-to-steal-machine-keys/", "creation_timestamp": "2026-07-22T00:44:27.395224Z"}, {"uuid": "7260f72f-9e91-4aa2-a36c-d32166957821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\nUPDATE:\nVolgens watchTowr is er een publieke exploit code voor SharePoint kwetsbaarheid CVE-2026-50522 gepubliceerd en wordt deze op on-premise versies van SharePoint nu ook actief misbruikt. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken om zichzelf voor langere termijn toegang tot netwerken van kwetsbare systemen te verschaffen, door middel van het stelen van machine-keys. \n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-22T01:00:43.201650Z"}, {"uuid": "3c83d0fd-bcd2-4b0c-a25d-27378fb68baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-sharepoint-rce-cve-2026-50522.html", "content": "A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr.\n\nThe vulnerability in question is CVE-2026-50522 (CVSS score: 9.8), a critical deserialization of untrusted data in Microsoft Office SharePoint that could allow an unauthorized attacker to execute code over a network. Microsoft credited DEVCORE", "creation_timestamp": "2026-07-22T01:00:49.688911Z"}, {"uuid": "3d8343e5-335f-4e25-a626-006c390aecb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mr77kxc4mk2p", "content": "SharePoint Gets Stabbed; Bureaucrats Still Waiting for the Memo\nPANIC 82% | Lag 0.0h | A critical SharePoint remote code execution flaw, CVE-2026-50522, is being actively exploited after \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-22T01:51:47.850407Z"}, {"uuid": "d0b08fa4-1116-4d2d-97cd-4198f9754868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50522", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mr7edoetsp2g", "content": "Critical SharePoint RCE CVE-2026-50522 Actively Exploited to Steal Machine Keys\n\nhttps://blindthoughts.com/sharepoint-rce-cve-2026-50522-machine-key-theft\n\n#sharepoint #rce #cve #patchnow #windows", "creation_timestamp": "2026-07-22T03:17:12.099857Z"}, {"uuid": "382ea41c-0df0-41be-aed1-1d056ded7eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/eu-technology.bsky.social/post/3mr7ixzbgo724", "content": "Critical SharePoint RCE flaw exploited to steal machine keys\n\nhttps://www.europesays.com/uk/1103896/\n\nHackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access\u2026", "creation_timestamp": "2026-07-22T04:40:10.357082Z"}, {"uuid": "76fbd89a-7b44-4fa7-ade0-191599095de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/uk-news.bsky.social/post/3mr7iy6caoe24", "content": "Critical SharePoint RCE flaw exploited to steal machine keys\n\nhttps://www.europesays.com/uk/1103896/\n\nHackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access\u2026#uk #news #uknews", "creation_timestamp": "2026-07-22T04:40:15.240797Z"}, {"uuid": "7dec4d44-1fd9-4cca-aaad-6e655fd51081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mr7jkmsapj2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 68 interactions\nCVE-2026-60137: 54 interactions\nCVE-2026-58532: 47 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50522: 10 interactions\nCVE-2026-0257: 6 interactions\nCVE-2026-6875: 5 interactions\n", "creation_timestamp": "2026-07-22T04:50:34.102886Z"}, {"uuid": "4a70998a-ac68-46ed-bf03-8354113b2aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mraanzodp62r", "content": "CVE-2026-50522 enables remote code execution in SharePoint via untrusted deserialization, with attackers stealing machine keys for persistent access after active exploitation.\n", "creation_timestamp": "2026-07-22T11:44:04.899369Z"}, {"uuid": "07cdefa0-dc47-42f4-90e0-79900791e787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mr7qc3sewx2e", "content": "In what is turning out to be just another Tuesday in IT, a critical SharePoint Server remote code execution flaw designated CVE-2026-50522 is under active exploitation following a public PoC release. This lovely situation plagued poor admins relying on Microsoft SharePoint Server...\n\nRead full story", "creation_timestamp": "2026-07-22T06:51:05.550660Z"}, {"uuid": "0d32e46b-745b-4039-996b-dca413392d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/youranonirc.bsky.social/post/3mr7sd3i3te2o", "content": "Geopolitical tensions escalate with US-Iran conflict driving oil prices past $100/barrel. In cyber, a critical SharePoint exploit (CVE-2026-50522) is under active attack. Patch now! #Cybersecurity #Geopolitics", "creation_timestamp": "2026-07-22T07:27:24.728094Z"}, {"uuid": "b60a6ee8-7cc9-419d-ac2c-5a9ac35f1d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mr7t5knyvh24", "content": "watchTowr reports active exploitation of SharePoint CVE-2026-50522 after a public PoC, with attackers stealing machine keys for persistence.", "creation_timestamp": "2026-07-22T07:42:13.955605Z"}, {"uuid": "059f1da2-f680-413a-9d23-410ce3a47f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mr7tbgxsect3", "content": "SharePoint\u306e\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\u3092\u30cf\u30c3\u30ab\u30fc\u304c\u60aa\u7528\u3057\u30de\u30b7\u30f3\u30ad\u30fc\u3092\u7a83\u53d6\uff08CVE-2026-50522\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46801/", "creation_timestamp": "2026-07-22T07:44:38.821554Z"}, {"uuid": "cc42cd0a-1cee-4c8c-b123-4185ad266820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50522", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mra2fhx7ku2x", "content": "\ud83d\udcf0 Celah RCE Kritis SharePoint Dieksploitasi untuk Mencuri Machine Keys\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/22/celah-rce-sharepoint-cve-2026-50522-machine-keys/\n\n#cve #cybersecurity #keamananSiber #microsoft #patchTuesday #rce #sharepoint #vulnerability", "creation_timestamp": "2026-07-22T09:51:54.699564Z"}, {"uuid": "7db2e7be-2db5-474d-8429-d7cb78ac272f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116963282945289668", "content": "OpenAI y Hugging Face enfrentan un incidente cr\u00edtico que revela nuevas t\u00e1cticas de ataque en IA; Microsoft SharePoint sufre explotaci\u00f3n activa de una vulnerabilidad que roba claves persistentes; JsonFast 1.2.83 permite ejecuci\u00f3n remota de c\u00f3digo con t\u00e9cnicas avanzadas; ransomware Anubis amenaza a Coca-Cola Fairlife con filtraci\u00f3n de datos. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff22/07/26\ufeff\ufeff \ud83d\udcc6 |==== \n\ud83d\udd10 INCIDENTE DE SEGURIDAD ENTRE OPENAI Y HUGGING FACE DURANTE EVALUACI\u00d3N DE IA\nOpenAI y Hugging Face reportan un incidente cr\u00edtico detectado durante la evaluaci\u00f3n conjunta de modelos de inteligencia artificial. Este evento revela sofisticadas capacidades cibern\u00e9ticas empleadas por atacantes e impone importantes lecciones para fortalecer la defensa en el desarrollo y despliegue de IA. Mantente al tanto para implementar estrategias que protejan tus sistemas frente a ataques avanzados. Descubre los detalles completos del incidente y c\u00f3mo protegerte aqu\u00ed \ud83d\udc49 https://djar.co/q75od9\n\ud83d\udee1\ufe0f VULNERABILIDAD CR\u00cdTICA EN SHAREPOINT: ROBO ACTIVO DE CLAVES DE M\u00c1QUINA\nSe ha detectado una explotaci\u00f3n activa de la vulnerabilidad CVE-2026-50522 en Microsoft SharePoint, que permite a atacantes robar claves de m\u00e1quina y mantener acceso persistente a sistemas, incluso tras aplicar parches. Esta amenaza pone en riesgo la integridad y confidencialidad de entornos corporativos. Es indispensable auditar configuraciones y aplicar mitigaciones adicionales para minimizar el impacto. Conoce c\u00f3mo defender tu infraestructura contra esta falla grave \ud83d\udc49 https://djar.co/hMLQB\n\ud83d\udcbb EJECUCI\u00d3N REMOTA DE C\u00d3DIGO EN JSONFAST 1.2.83: NUEVO VECTOR DE ATAQUE\nLa versi\u00f3n 1.2.83 de JsonFast presenta una vulnerabilidad que posibilita la ejecuci\u00f3n remota de c\u00f3digo al combinar un SSRF en checkAutoType con t\u00e9cnicas avanzadas de bypass y manipulaci\u00f3n de recursos del sistema. Esto representa un riesgo elevad\u00edsimo para aplicaciones que procesan JSON sin validaci\u00f3n adecuada. Revisa las recomendaciones para proteger tus sistemas del exploit y asegurar tus entornos de desarrollo. Aprende m\u00e1s sobre esta amenaza y su mitigaci\u00f3n aqu\u00ed \ud83d\udc49 https://djar.co/decj\n\ud83d\udea8 RANSOMWARE ANUBIS ATACA A COCA-COLA FAIRLIFE AMENAZANDO CON FILTRACI\u00d3N DE DATOS\nEl grupo criminal Anubis ha reivindicado un ataque ransomware a Coca-Cola Fairlife, exigiendo rescate bajo la amenaza de publicar informaci\u00f3n sensible sustra\u00edda. Este incidente resalta la importancia de contar con estrategias robustas de respuesta a incidentes y backups confiables para evitar da\u00f1os irreparables. Aumenta la resiliencia de tu organizaci\u00f3n con buenas pr\u00e1cticas y defensa proactiva frente a ransomware. Inf\u00f3rmate sobre el ataque y c\u00f3mo protegerte aqu\u00ed \ud83d\udc49 https://djar.co/yJk2", "creation_timestamp": "2026-07-22T11:01:02.944540Z"}, {"uuid": "525ce913-ecd1-4ec9-9b02-e1b051e00334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mraabo6gc22z", "content": "\ud83d\udea8 Breaking: Fourth SharePoint Vulnerability Exploited in Past Month\u2019s Wave of Attacks\nCVE-2026-50522 is being exploited by threat actors to steal machine keys and retain long-term access. The post Fourth SharePoint Vulnerability Exploited in Past Month\u2019s Wave of\u2026\n\n\ud83d\udd17 https://hnow.live/a/1223fe5b", "creation_timestamp": "2026-07-22T11:37:09.470430Z"}, {"uuid": "6a2f3af8-d213-40dd-a838-aaa86b0eb578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mrabhrs67s23", "content": "Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/07/22/s...\n\n#PoC #SharePoint #vulnerability #vulnerabilitymanagement #cybersecurity #cybersecuritynews @censys.bsky.social", "creation_timestamp": "2026-07-22T11:58:32.206116Z"}, {"uuid": "35c494fe-1d45-4b78-981f-8e7cf7782a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50524", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmxcuhr2n", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-50524 impacts Microsoft.NETCore.App.Runtime.linux-x64 in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/632\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-22T12:01:21.991746Z"}, {"uuid": "cf39b5b4-1500-489a-9d22-4c0556fb6591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50528", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmziuds2r", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-50528 impacts Microsoft.NETCore.App.Runtime.linux-x64 in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/633\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-22T12:01:24.056236Z"}, {"uuid": "b54e2d5e-13f3-4753-b711-fa52940f5b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mrabn75qfd27", "content": "\u307e\u305f\u3082SharePoint\u306eRCE\u304c\u60aa\u7528\u3055\u308c\u308b\u2015\u2015\u30d1\u30c3\u30c1\u9069\u7528\u5f8c\u306f\u30de\u30b7\u30f3\u30ad\u30fc\u306e\u30ed\u30fc\u30c6\u30fc\u30b7\u30e7\u30f3\u3092(CVE-2026-50522)\n\n\u653b\u6483\u8005\u306f\u3001SharePoint\u306e\u6df1\u523b\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(RCE)\u8106\u5f31\u6027(CVE-2026-50522)\u3092\u60aa\u7528\u3057\u3001\u30b5\u30fc\u30d0\u30fc\u306eIIS \u30de\u30b7\u30f3\u30ad\u30fc\u3092\u7a83\u53d6\u3057\u3066\u3044\u307e\u3059\u3002 \u300cWatchTowr\u306f\u3001\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u306eMicrosoft SharePoint\u74b0\u5883\u306b\u5bfe\u3057\u3066CVE-2026-50522\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b", "creation_timestamp": "2026-07-22T12:01:30.985828Z"}, {"uuid": "e46f0dd3-0e1d-4cac-9773-66fc2b7e3553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrac655uu52w", "content": "A critical vulnerability, CVE-2026-50522, affecting on-premises Microsoft SharePoint servers, allows unauthenticated remote code execution with a CVSS score of 9.8. It impacts SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition.", "creation_timestamp": "2026-07-22T12:10:58.844429Z"}, {"uuid": "d1faa8c5-b614-4b97-b40e-76c36b441e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mradigk7uw2e", "content": "~Certeu~\nActive exploitation of critical SharePoint RCE CVE-2026-50522 (CVSS 9.8); patch immediately and rotate exposed credentials.\n-\nIOCs: CVE-2026-50522\n-\n#CVE202650522 #SharePoint #ThreatIntel", "creation_timestamp": "2026-07-22T12:34:37.777030Z"}, {"uuid": "3469595f-330c-42aa-b461-529783fbb2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mradta7y5k2i", "content": "Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522)\n\nwww.helpnetsecurity.com/2026/07/22/s...\n\n#Kyberturvallisuus #Kyber #Tilannekuva", "creation_timestamp": "2026-07-22T12:40:42.165811Z"}, {"uuid": "c84d98c1-5375-40c9-9344-e4d69394f252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/sen-perimetered.bsky.social/post/3mragehb77a2e", "content": "CVE-2026-50522. SharePoint. CVSS 9.8. Unauthenticated deserialization, active exploitation confirmed in the last 24h.\n\nPatch isn't enough. Attackers are pulling IIS machine keys in a single request \u2014 keys that survive patching.\n\nRotate them. Now.", "creation_timestamp": "2026-07-22T13:26:05.436153Z"}, {"uuid": "43dbe055-6b77-4b03-a86a-015980bef0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50522", "type": "seen", "source": "https://bsky.app/profile/intelnightowl.bsky.social/post/3mrajdoi4ky2c", "content": "Active exploitation of critical SharePoint CVE\u20112026\u201150522 after PoC release threatens global IT infrastructure and raises concerns for national security ag https://securityaffairs.com/195760/security/public-poc-triggers-active-exploitation-of-critical-sharepoint-rce-vulnerability-cve-2026-50522.html", "creation_timestamp": "2026-07-22T14:19:20.922150Z"}, {"uuid": "0181ca5c-024a-4e98-b6c3-f6720599e189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mralev5lrk2a", "content": "Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC\n\nA third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr.\n\nThe vulnerability in question is \u2026\n#hackernews #microsoft #news", "creation_timestamp": "2026-07-22T14:55:49.145160Z"}, {"uuid": "94d1f409-d5a8-4df9-b610-469967b4a088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://t.me/true_secator/8432", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2026-50522 \u0432 Microsoft SharePoint \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u044d\u0442\u0438 \u0442\u043e\u043a\u0435\u043d\u044b, \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0430\u0439\u0442\u044b \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b SharePoint, \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0439 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438.\n\nMicrosoft \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443\u00a0\u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043f\u043e \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u043c PatchTuesday, \u043d\u043e \u043d\u0435 \u0431\u044b\u043b\u0430 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u043e\u0441\u044c \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0440\u044b\u0447\u0430\u0433\u0430 \u0430\u0442\u0430\u043a\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-50522 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 SharePoint \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u0441\u0435\u0442\u044c \u043f\u043e\u043f\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n20 \u0438\u044e\u043b\u044f watchTowr \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 PoC \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0447\u0430\u0441\u043e\u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0435\u0442\u044c \u043b\u043e\u0432\u0443\u0448\u0435\u043a Attacker Eye \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043a\u0440\u0430\u0434\u0443\u0442 \u043c\u0430\u0448\u0438\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0438\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Defused \u0435\u0449\u0435 17 \u0438\u044e\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u00ab\u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 SharePoint\u00bb, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u044d\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e. \u041d\u043e \u043d\u0430 \u0434\u043d\u044f\u0445 \u0432 Defused \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b CVE-2026-50522 \u0432 SharePoint.\n\n\u041f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 \u043e\u0434\u0438\u043d PoC PowerShell \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-50522 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 GitHub (\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043d\u0435\u043a\u0438\u043c Janggggg).\n\n\u0412 \u044d\u0442\u043e\u043c PoC \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 .NET BinaryFormatter \u0432 \u0432\u0438\u0434\u0435 cookie \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e SecurityContextToken \u0432 \u043e\u0442\u0432\u0435\u0442\u0435 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 WS-Federation, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 SharePoint _trust/default.aspx.\n\n\u0415\u0441\u043b\u0438 \u0442\u043e\u043a\u0435\u043d \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 SharePoint.\n\n\u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e Janggggg \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b PoC \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c, \u043a\u043e\u0433\u0434\u0430 watchTowr \u043d\u0430\u0447\u0430\u043b\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c \u043d\u0435\u044f\u0441\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043b\u0438 \u0432 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.\n\n\u0425\u043e\u0442\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 SharePoint \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, watchTowr \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043b\u044e\u0431\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b.", "creation_timestamp": "2026-07-22T15:00:04.467236Z"}, {"uuid": "e2394c7e-197f-4af7-accc-c1c12505f23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://t.me/BleepingComputer/25160", "content": "\u200aCritical SharePoint RCE flaw exploited to steal machine keys\n\nHackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-sharepoint-rce-flaw-exploited-to-steal-machine-keys/", "creation_timestamp": "2026-07-22T15:00:04.606981Z"}, {"uuid": "41a10875-1558-430c-9b3b-492e35cf9b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50522", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mralof2zdx2d", "content": "Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public\u00a0PoC\n\nLearn how attackers are exploiting the critical Microsoft SharePoint RCE vulnerability CVE-2026-50522 after a public PoC release...\n\nhttps://thecybersecguru.com/news/sharepoint-cve-2026-50522-active-exploitation/", "creation_timestamp": "2026-07-22T15:01:08.221403Z"}, {"uuid": "27408218-6806-4551-b189-ab4fb02e75a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3mrals3c2ua2y", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\n\nLes vuln\u00e9rabilit\u00e9s CVE-2026-50522 et CVE-2026-58644 permettent une ex\u00e9cution de code arbitraire \u00e0 distance non authentifi\u00e9e sur SharePoint et sont activement exploit\u00e9es.\n\nwww.cert.ssi.gouv.fr/alerte/CERTF...", "creation_timestamp": "2026-07-22T15:03:11.368316Z"}, {"uuid": "93410ca2-2f1a-41fd-be1d-48e2f95f817b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/116964235036563174", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\nLes vuln\u00e9rabilit\u00e9s CVE-2026-50522 et CVE-2026-58644 permettent une ex\u00e9cution de code arbitraire \u00e0 distance non authentifi\u00e9e sur SharePoint et sont activement exploit\u00e9es.\nhttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-008/", "creation_timestamp": "2026-07-22T15:03:13.596173Z"}, {"uuid": "6614d3e3-25a2-4481-939d-7f044ab41039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrap2xev3j2s", "content": "Third on-prem SharePoint RCE this month: CVE-2026-50522 (CVSS 9.8) went from public PoC to active exploitation in hours.\n\nAll three July flaws steal the server machine key. Patch, then ROTATE the key, or a patched box is still owned.\n\n#SharePoint #infosec", "creation_timestamp": "2026-07-22T16:01:50.865041Z"}, {"uuid": "81c8bcff-ead1-4502-bc4c-9082d24e31b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "Telegram/Dukm_htJrIpGOZqoDJUhS517XJJYQfKNbcSgKtz1K8tDTao", "content": "", "creation_timestamp": "2026-07-22T17:00:04.417456Z"}, {"uuid": "bf042803-2ea1-4d69-b5e5-661d13c82708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50522", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mraw473dp524", "content": "CVE-2026-50522: SharePoint machine keys stolen in a single request. Active exploitation now. Stolen keys mean forged, persistent access. Patch and rotate.\n#ThreatIntel #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/sharepoint-cve-2026-50522-active-exploitation-machine-keys-2026", "creation_timestamp": "2026-07-22T18:07:48.562666Z"}, {"uuid": "0ceab915-8363-45bf-bd5d-657f7f15e5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrb42ccl7c2a", "content": "Critical SharePoint RCE flaw exploited to steal machine keys\n\nHackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. [...]\n#hackernews #microsoft #news", "creation_timestamp": "2026-07-22T19:54:07.574973Z"}, {"uuid": "f03eabf8-3a06-4029-95d9-ae41214ce770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mrb4altjzo2g", "content": "\ud83d\uded1 CVE-2026-50522\nMicrosoft SharePoint\nCVSS 9.8 / EPSS 20% / KEV: No\nTL;DR: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthoriz\u2026\nhttps://cvesentinel.com/report/CVE-2026-50522?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-22T19:57:38.125695Z"}, {"uuid": "bd50746c-1960-4945-8e90-e764f0c5875f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mrb4alkvyz2j", "content": "Hackers Exploit Critical SharePoint Flaw to Steal Machine\u00a0Keys\n\nCVE-2026-50522 is under active exploitation, allowing attackers to execute code remotely on vulnerable on-premises Microsoft SharePoint servers without authentication. CISA recently flagged three actively exploited SharePoint\u2026", "creation_timestamp": "2026-07-22T19:57:38.689337Z"}, {"uuid": "307792e0-afb6-4233-be06-c801c7459886", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/458e5cd6-7ba6-42b3-bbae-4d23b6c1a104", "content": "", "creation_timestamp": "2026-07-22T20:00:02.201693Z"}, {"uuid": "05ac4966-0b7c-47d5-a761-63b8316cb2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrb6do7zpk2a", "content": "Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522\n\nCritical SharePoint RCE vulnerability CVE-2026-50522 is under active exploitation after the release of a PoC exploit code. A critical Microsoft SharePoint vulnerability, tra\u2026\n#hackernews #microsoft #news", "creation_timestamp": "2026-07-22T20:35:09.428829Z"}, {"uuid": "1373ac3b-0ba8-4856-b823-90893c765cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50522", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/116965619316224010", "content": "With confirmed exploit sources, we've now added this one to our MISP feed.\nhttps://discourse.ifin.network/t/microsoft-sharepoint-cve-2026-50522/678/2\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-07-22T20:55:26.319679Z"}, {"uuid": "a714de44-5583-432d-920f-2bf1819d84a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116965837513850094", "content": "Looks like somebody posted an exploit for CVE-2026-50522\nWhile I can reproduce it on SharePoint Subscription Edition, I didn't get it to work on SharePoint 2016 or 2019. But I could also attribute that to me having no clue how to properly install SharePoint.\nHere it is tweaked to run calc.exe as the SharePoint user (sp_farm in my case), as that's a touch more noticeable than it making a web request.", "creation_timestamp": "2026-07-22T21:50:44.272094Z"}, {"uuid": "e217772d-aae5-4e7a-98ed-f2b4a7196de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mrbckzj2u5w2", "content": "Looks like somebody posted an exploit for CVE-2026-50522\n\nWhile I can reproduce it on SharePoint Subscription Edition, I didn't get it to work on SharePoint 2016 or 2019. But I could also attribute that to me having **no clue** how to properly install [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-07-22T21:51:01.154643Z"}, {"uuid": "f056c00e-a755-486d-b8e6-f7ac0c26bd64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/116966088674935096", "content": "RE: https://infosec.exchange/@wdormann/116965837513850094\nThis vuln (CVE-2026-50522) will see mass exploitation. It's out of the box unauth RCE in SharePoint, a mass exposed internet technology.", "creation_timestamp": "2026-07-22T22:54:47.919077Z"}, {"uuid": "6b817f5c-7aa3-460d-8dd6-4adab1f83ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50522", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrbh2iw2642j", "content": "\ud83d\udc1b VULNERABILITIES Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522) \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/07/22/sharepoint-cve-2026-50522-exploited/ #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-22T23:11:04.960728Z"}, {"uuid": "e05b3787-9f08-4130-ac18-7c396057fe4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "published-proof-of-concept", "source": "Telegram/Dukm_htJrIpGOZqoDJUhS517XJJYQfKNbcSgKtz1K8tDTao", "content": "", "creation_timestamp": "2026-07-23T00:00:09.725818Z"}, {"uuid": "19b2f878-38ab-4742-945a-e44393a62ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "https://t.me/true_secator/8432", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2026-50522 \u0432 Microsoft SharePoint \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u044d\u0442\u0438 \u0442\u043e\u043a\u0435\u043d\u044b, \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0430\u0439\u0442\u044b \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b SharePoint, \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0439 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438.\n\nMicrosoft \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443\u00a0\u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043f\u043e \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u043c PatchTuesday, \u043d\u043e \u043d\u0435 \u0431\u044b\u043b\u0430 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u043e\u0441\u044c \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0440\u044b\u0447\u0430\u0433\u0430 \u0430\u0442\u0430\u043a\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-50522 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 SharePoint \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u0441\u0435\u0442\u044c \u043f\u043e\u043f\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n20 \u0438\u044e\u043b\u044f watchTowr \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 PoC \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0447\u0430\u0441\u043e\u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0435\u0442\u044c \u043b\u043e\u0432\u0443\u0448\u0435\u043a Attacker Eye \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043a\u0440\u0430\u0434\u0443\u0442 \u043c\u0430\u0448\u0438\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0438\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Defused \u0435\u0449\u0435 17 \u0438\u044e\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u00ab\u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 SharePoint\u00bb, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u044d\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e. \u041d\u043e \u043d\u0430 \u0434\u043d\u044f\u0445 \u0432 Defused \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b CVE-2026-50522 \u0432 SharePoint.\n\n\u041f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 \u043e\u0434\u0438\u043d PoC PowerShell \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-50522 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 GitHub (\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043d\u0435\u043a\u0438\u043c Janggggg).\n\n\u0412 \u044d\u0442\u043e\u043c PoC \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 .NET BinaryFormatter \u0432 \u0432\u0438\u0434\u0435 cookie \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e SecurityContextToken \u0432 \u043e\u0442\u0432\u0435\u0442\u0435 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 WS-Federation, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 SharePoint _trust/default.aspx.\n\n\u0415\u0441\u043b\u0438 \u0442\u043e\u043a\u0435\u043d \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 SharePoint.\n\n\u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e Janggggg \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b PoC \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c, \u043a\u043e\u0433\u0434\u0430 watchTowr \u043d\u0430\u0447\u0430\u043b\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c \u043d\u0435\u044f\u0441\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043b\u0438 \u0432 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.\n\n\u0425\u043e\u0442\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 SharePoint \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, watchTowr \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043b\u044e\u0431\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b.", "creation_timestamp": "2026-07-23T00:00:23.093541Z"}, {"uuid": "af4ab504-acac-4926-9db5-dc7fa655d165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "https://t.me/BleepingComputer/25160", "content": "\u200aCritical SharePoint RCE flaw exploited to steal machine keys\n\nHackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-sharepoint-rce-flaw-exploited-to-steal-machine-keys/", "creation_timestamp": "2026-07-23T00:00:22.945275Z"}, {"uuid": "00fc3fb6-d1a1-48be-8cd1-294fa1df782d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrc2ecn4ld2c", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 71 interactions\nCVE-2026-60137: 57 interactions\nCVE-2026-58532: 47 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50522: 17 interactions\nCVE-2026-16232: 5 interactions\nCVE-2026-58644: 5 interactions\n", "creation_timestamp": "2026-07-23T04:56:35.331823Z"}, {"uuid": "e249312f-b954-411b-b091-eca99134a8a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://t.me/S_E_Reborn/6493", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2026-50522 \u0432 Microsoft SharePoint \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u044d\u0442\u0438 \u0442\u043e\u043a\u0435\u043d\u044b, \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0430\u0439\u0442\u044b \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b SharePoint, \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0439 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438.\n\nMicrosoft \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443\u00a0\u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043f\u043e \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u043c PatchTuesday, \u043d\u043e \u043d\u0435 \u0431\u044b\u043b\u0430 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u043e\u0441\u044c \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0440\u044b\u0447\u0430\u0433\u0430 \u0430\u0442\u0430\u043a\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-50522 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 SharePoint \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u0441\u0435\u0442\u044c \u043f\u043e\u043f\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n20 \u0438\u044e\u043b\u044f watchTowr \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 PoC \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0447\u0430\u0441\u043e\u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0435\u0442\u044c \u043b\u043e\u0432\u0443\u0448\u0435\u043a Attacker Eye \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043a\u0440\u0430\u0434\u0443\u0442 \u043c\u0430\u0448\u0438\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0438\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Defused \u0435\u0449\u0435 17 \u0438\u044e\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u00ab\u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 SharePoint\u00bb, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u044d\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e. \u041d\u043e \u043d\u0430 \u0434\u043d\u044f\u0445 \u0432 Defused \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b CVE-2026-50522 \u0432 SharePoint.\n\n\u041f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 \u043e\u0434\u0438\u043d PoC PowerShell \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-50522 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 GitHub (\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043d\u0435\u043a\u0438\u043c Janggggg).\n\n\u0412 \u044d\u0442\u043e\u043c PoC \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 .NET BinaryFormatter \u0432 \u0432\u0438\u0434\u0435 cookie \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e SecurityContextToken \u0432 \u043e\u0442\u0432\u0435\u0442\u0435 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 WS-Federation, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 SharePoint _trust/default.aspx.\n\n\u0415\u0441\u043b\u0438 \u0442\u043e\u043a\u0435\u043d \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 SharePoint.\n\n\u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e Janggggg \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b PoC \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c, \u043a\u043e\u0433\u0434\u0430 watchTowr \u043d\u0430\u0447\u0430\u043b\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c \u043d\u0435\u044f\u0441\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043b\u0438 \u0432 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.\n\n\u0425\u043e\u0442\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 SharePoint \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, watchTowr \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043b\u044e\u0431\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b.", "creation_timestamp": "2026-07-23T02:00:03.611678Z"}, {"uuid": "d11b1c44-b7a3-4a92-a4b8-028d5dae47cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://t.me/information_security_channel/55609", "content": "Fourth SharePoint Vulnerability Exploited in Past Month\u2019s Wave of Attacks\nhttps://www.securityweek.com/fourth-sharepoint-vulnerability-exploited-in-past-months-wave-of-attacks/\n\nCVE-2026-50522 is being exploited by threat actors to steal machine keys and retain long-term access.\nThe post Fourth SharePoint Vulnerability Exploited in Past Month\u2019s Wave of Attacks (https://www.securityweek.com/fourth-sharepoint-vulnerability-exploited-in-past-months-wave-of-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-23T04:00:05.015370Z"}, {"uuid": "adbd7773-6fb5-4953-bb20-51296b6f7a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrbzeaebtc2a", "content": "Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522)\n\nAttackers are exploiting a critical SharePoint remote code execution (RCE) vulnerability (CVE-2026-50522) to extract the servers\u2019 IIS machine keys. \u201cWatchTowr is observing active ex\u2026\n#hackernews #microsoft #news", "creation_timestamp": "2026-07-23T04:38:39.029591Z"}, {"uuid": "5fece628-17dc-4c62-8fa7-99bd0e4d830c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/smartdeals.bsky.social/post/3mrc2bfsrbf2m", "content": "Stay ahead of cyber threats like CVE-2026-50522! Protect your digital life with the latest security updates and high-performance tech. #CyberSecurity #TechNews", "creation_timestamp": "2026-07-23T04:54:58.307521Z"}, {"uuid": "02817cb1-e863-4eda-bb56-5de756425cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://t.me/thehackernews/9572", "content": "\ud83d\udea8 Patching your #SharePoint Server may not be enough if it was already exposed.\n\nAttackers are exploiting CVE-2026-50522, a critical RCE flaw, to pull machine keys with a single request and maintain access, watchTowr says.\n\nA public PoC is available, and this is the third SharePoint Server flaw linked to active exploitation in July 2026.\n\nDetails: https://thehackernews.com/2026/07/critical-sharepoint-rce-cve-2026-50522.html", "creation_timestamp": "2026-07-23T05:00:03.970700Z"}, {"uuid": "16d19d31-4008-4d23-a7e4-2cd12124ffec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrca6t3hvi2e", "content": "Threat actors are actively exploiting CVE-2026-50522 to steal machine keys from SharePoint again. Why do we even bother patching software around here?\n\n#SharePointAgain #ITSupportLife", "creation_timestamp": "2026-07-23T06:40:53.829296Z"}, {"uuid": "d553d51c-1d25-4671-b15d-ea8c8fad54b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrca6vpemd2w", "content": "Here we go again, as threat actors are now merrily exploiting CVE-2026-50522 in yet another utterly exhausting wave of monthly SharePoint attacks. Any miserable organization relying on SharePoint has been affected, with attackers casually stealing machine keys to secure comfortab...\n\nRead full story", "creation_timestamp": "2026-07-23T06:40:56.554021Z"}, {"uuid": "4099c3d9-bb3f-45f8-b8cf-678483d52794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://infosec.exchange/users/cert_eu/statuses/116968050524026906", "content": "UPDATE: Critical Vulnerabilities in Microsoft SharePoint (CERT-EU Security Advisory 2026-009)\n[UPDATED] On 14 July 2026, Microsoft released security updates addressing critical remote code execution (RCE) vulnerabilities in Microsoft SharePoint Server. On 20 July 2026, WatchTowr identified a proof-of-concept exploit code and subsequently observed active exploitation of CVE-2026-50522, a vulnerability part of an ongoing series of actively exploited flaws affecting on-premise SharePoint Server instances, including CVE-2026-32201, CVE-2026-45659, CVE-2026-56164, and CVE-2026-58644.CERT-EU strongly recommends updating affected servers immediately, rotating credentials for any assets that may have been exposed to the internet, and conducting a compromise assessment.\nhttps://www.cert.europa.eu/publications/security-advisories/2026-009/", "creation_timestamp": "2026-07-23T07:13:31.182349Z"}, {"uuid": "4f44bd19-83f7-40d6-967b-6c11fa4d90d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/de-nachrichten.bsky.social/post/3mrcdrizsu42d", "content": "Sicherheitsforscher beobachten Angriffe auf Microsoft SharePoint \u00fcber die Schwachstelle CVE-2026-50522. Angreifer entwenden dabei Maschinenschl\u00fcssel.", "creation_timestamp": "2026-07-23T07:45:03.274459Z"}, {"uuid": "e00c012e-67e7-4d72-93eb-2334b11d5457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mrcgbzdd5s2e", "content": "SharePoint CVE-2026-50522 (CVSS 9.8): unauthenticated RCE actively exploited since July 20 to steal machine keys \u2014 still valid after you patch. 3rd exploited SP RCE in 3 weeks. Patch, then rotate keys.\u00a0\n\n\ud83c\uddec\ud83c\udde7 zurl.co/kRuIP\n\ud83c\udde9\ud83c\uddea zurl.co/XsOPn \n\n#CyberSecurity", "creation_timestamp": "2026-07-23T08:30:03.839614Z"}, {"uuid": "4a90ff42-1f30-45a5-9359-0a9bd1d6e64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116969232191519013", "content": "It's also important to remember that the Exploitability section of any given MSRC security update is reflective of the state of the world AT PUBLICATION TIME.\nThat is, the Publicly disclosed and Exploited values reflect the world last week. Not today. It's in the KEV due to active exploitation.", "creation_timestamp": "2026-07-23T12:14:02.391368Z"}, {"uuid": "58d8a6c6-ae69-449a-967d-60e9274b067e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mrcsujqloq2v", "content": "CRITICAL THREAT: CVE-2026-50522 in Microsoft SharePoint enables unauthenticated remote code execution via untrusted data deserialization. Active exploitation is confirmed! Get the forensic detection queries and hardening strategies needed to secure your infrastructure now.\u2026", "creation_timestamp": "2026-07-23T12:15:29.744121Z"}, {"uuid": "51029527-dcdf-4e49-9250-c846c90673de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/steelwise.bsky.social/post/3mrcw7ngaaq2p", "content": "SharePoint's third actively-exploited flaw this month: patching isn't enough. CVE-2026-50522 is the third on-premises SharePoint Server vulnerability under active exploitation in July 2026, CVSS 9.8. Attackers are stealing\u2026 Read the filing #sharepoint #patchtuesday #infosec #cybersecurity", "creation_timestamp": "2026-07-23T13:15:05.031907Z"}, {"uuid": "3fcab8de-5918-40fa-8e46-d8295cb25d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mrcy223hy42n", "content": "2/6 Fresh exploitation signals\nCheck Point says SmartConsole CVE-2026-16232 is actively exploited; SharePoint CVE-2026-50522 is now exploitation-priority.", "creation_timestamp": "2026-07-23T13:47:42.955247Z"}, {"uuid": "dfcc1e74-6d71-4c52-9939-22870613a664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://bsky.app/profile/ifin-intel.org/post/3mrd5hpeii32o", "content": "The critical SharePoint vulnerability CVE-2026-50522 now appears to be under massive exploitation. We have context and current IOCs in this post. We've also updated the MISP feed with the same.\n\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-07-23T15:24:50.279119Z"}, {"uuid": "77bdcdb3-f7a7-474e-919e-0bdd75e73dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50522", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/116969982463657291", "content": "The critical SharePoint vulnerability CVE-2026-50522 now appears to be under massive exploitation. We have context and current IOCs in this post. We've also updated the MISP feed with the same.\n#ThreatIntel #ThreatIntelligence #IFIN\nhttps://discourse.ifin.network/t/microsoft-sharepoint-cve-2026-50522/678", "creation_timestamp": "2026-07-23T15:25:20.866752Z"}]}