Tag Archives: Patch Tuesday

Patch Tuesday – September 2026

2026-09-09 Rapid7

Post Syndicated from Rapid7 original https://www.rapid7.com/blog/post/em-patch-tuesday-september-2026

Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday, including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch Tuesday ever depends on how we count, but this is by far the most CVEs that Microsoft has ever published in a single day. As Rapid7 noted last month, there is no reason to suppose that Patch Tuesday will ever return to the lower volumes we saw prior to 2026. Microsoft is aware of exploitation in the wild for two of the vulnerabilities published today.

Windows ALPC: zero-day EoP

The eternal game of elevation of privilege whack-a-mole between Microsoft and attackers continues. This month, the battle is centered on the Windows Advanced Local Procedure Call (ALPC) mechanism, a kernel capability that facilitates inter-process communication. Microsoft is aware of exploitation in the wild already. Successful abuse of the flaw underlying CVE-2026-85880 grants an attacker SYSTEM via a buffer overflow that enables an out-of-bounds write, and as we all know by now, this is exactly what would happen during the first five minutes of a technically accurate horror movie about ransomware. We can infer one silver lining here: since neither Server 2025 nor Windows 11 receives patches for CVE-2026-85880, it is likely that Microsoft’s ongoing efforts to level up memory safety by rewriting critical kernel components in Rust are paying off.

Windows Update Stack: zero-day EoP

Attackers disappointed by Microsoft’s move towards memory safety improvements for various critical kernel components need not leave empty-handed today. Microsoft is aware of existing exploitation in the wild for CVE-2026-81963, an elevation of privilege vulnerability in the Windows Update Stack that leads to SYSTEM privileges via improper link resolution. All supported versions of Windows receive a patch, which presumably tightens up controls to prevent the Windows Update Stack from following a malicious link and overwriting a system component with an attacker-controlled imposter. The relatively pedestrian CVSS v3 base score of 7.8 is no reason for less concern, since no serious attacker will bother developing an intricate one-shot RCE when a two-stage attack chain consisting of low-privileged local access coupled with elevation of privilege will achieve the same ultimate goal much more easily.

Living on the Edge: browser advisory uncertainty

For the second month in a row, Microsoft does not appear to have published any desktop browser security advisories between the start of the month and Patch Tuesday. Microsoft Edge is built on top of Google’s open-source Chromium project, and on September 3, 2026, Google Chrome patched CVE-2026-85046, an exploited-in-the-wild zero-day vulnerability in the V8 JavaScript engine relied upon by both Edge and Chrome. So, is Microsoft Edge falling dangerously behind Google Chrome? Well, maybe. In this specific case, the Edge stable channel did receive a patch a day earlier than Chrome on September 2, 2026, and we know this because the Edge release notes mention it. However, almost a week later, Microsoft still hasn’t published a security advisory for CVE-2026-85046, and until that URL returns something better than a 404, that will remain true. In short: if you’re patched, you are protected, but if you rely on advisories to know which vulns exist, you could miss this zero-day vulnerability altogether. Only Microsoft knows why this advisory is missing, but there is no reason to suppose that Microsoft is somehow immune to the pressures that come along with the vast increase in vulnerability volume. A patch without an advisory is perhaps marginally better than an advisory without a patch, but keeping track of exposures without reliable advisory materials is not straightforward. Chrome patched 11 other vulnerabilities at the same time as CVE-2026-85046, but it’s not yet clear if those are patched in Edge. Until Microsoft sets the record straight, the only safe assumption is that these vulnerabilities (e.g. CVE-2026-85045) remain unpatched in Edge.

Microsoft lifecycle update

The next Microsoft product lifecycle changes with broad impact occur on October 14, 2026, when Windows 11 24H2 Home & Pro reach end of servicing, and Windows Server 2022 moves to extended support, with free critical security updates continuing, but no further feature development. At the same time, the final curtain falls for Windows Server 2012 and 2012 R2 with the expiry of the third and final year of cash-for-updates Extended Security Update (ESU) program for these aging workhorses. Office 2021 also moves beyond support, including the Long-Term Servicing Channel, with no ESU available in that case. Also in October, Exchange Server 2016 and 2019 will join the “no ESU” club, after two previous six-month reprieves. Presumably, Microsoft really means it this time.

Summary charts

Summary tables

Apps vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-80097	Microsoft Authenticator Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.6
CVE-2026-58611	Xbox Gaming Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8

Azure vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-70352	Azure AI Language Elevation of Privilege Vulnerability	N/A	No	10.0
CVE-2026-62895	Azure Arc SQL Server Extension Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69857	Azure Cosmos DB Spoofing Vulnerability	Exploitation More Likely	No	8.5
CVE-2026-77909	Azure CycleCloud Information Disclosure Vulnerability	Exploitation Less Likely	No	7.7
CVE-2026-81349	Azure HDInsight Ambari Elevation of Privilege Vulnerability	N/A	No	7.2
CVE-2026-83941	Entra ID Elevation of Privilege Vulnerability	N/A	No	9.9
CVE-2026-84003	Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability	Exploitation Less Likely	No	7.4
CVE-2026-83711	Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability	N/A	No	10.0
CVE-2026-83948	Microsoft Azure CLI Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-62906	Microsoft Discovery Studio Information Disclosure Vulnerability	N/A	No	7.4
CVE-2026-62916	Microsoft Entra ID Elevation of Privilege Vulnerability	N/A	No	9.1
CVE-2026-69854	Spring Cloud Azure Elevation of Privilege Vulnerability	Exploitation More Likely	No	9.0

Browser vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?
CVE-2026-84323	Chromium: CVE-2026-84323 Missing authorization in FileSystem	n/a	No
CVE-2026-84324	Chromium: CVE-2026-84324 Use after free in Proxy	n/a	No
CVE-2026-84325	Chromium: CVE-2026-84325 Improper input validation in DataTransfer	n/a	No
CVE-2026-84326	Chromium: CVE-2026-84326 Uninitialized resource in V8	n/a	No
CVE-2026-84327	Chromium: CVE-2026-84327 Incorrect authorization in Autofill	n/a	No
CVE-2026-84328	Chromium: CVE-2026-84328 Missing authorization in FileSystem	n/a	No
CVE-2026-84329	Chromium: CVE-2026-84329 Confused deputy in CredentialProvider	n/a	No
CVE-2026-84331	Chromium: CVE-2026-84331 Incorrect authorization in Actor	n/a	No
CVE-2026-84332	Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings	n/a	No
CVE-2026-84334	Chromium: CVE-2026-84334 Incorrect authorization in Chromoting	n/a	No
CVE-2026-84335	Chromium: CVE-2026-84335 Incorrect authorization in TabStrip	n/a	No
CVE-2026-84347	Chromium: CVE-2026-84347 Use after free in WebRTC	n/a	No
CVE-2026-84348	Chromium: CVE-2026-84348 Information leak in MediaCapture	n/a	No
CVE-2026-84349	Chromium: CVE-2026-84349 Use after free in Browser	n/a	No
CVE-2026-84350	Chromium: CVE-2026-84350 Use after free in TabStrip	n/a	No
CVE-2026-84351	Chromium: CVE-2026-84351 Buffer overflow in GPU	n/a	No
CVE-2026-84353	Chromium: CVE-2026-84353 Use after free in Shared Tab Groups	n/a	No
CVE-2026-84354	Chromium: CVE-2026-84354 Incorrect authorization in FileSystem	n/a	No
CVE-2026-84355	Chromium: CVE-2026-84355 Incorrect authorization in Navigation	n/a	No
CVE-2026-84356	Chromium: CVE-2026-84356 UI misrepresentation in FullScreen	n/a	No
CVE-2026-84357	Chromium: CVE-2026-84357 Improper input validation in Omnibox	n/a	No
CVE-2026-84358	Chromium: CVE-2026-84358 Improper privilege management in Downloads	n/a	No
CVE-2026-84359	Chromium: CVE-2026-84359 Information leak in Skia	n/a	No

Developer Tools vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-69439	.NET and Visual Studio Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69522	.NET and Visual Studio Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-71328	.NET and Visual Studio Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69805	.NET Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69806	.NET Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-58649	.NET Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2025-70873	An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.	n/a	No	7.5
CVE-2026-57099	ASP.NET Core Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69304	ASP.NET Core Denial of Service Vulnerability	Exploitation Less Likely	No	5.9
CVE-2026-34182	CMS AuthEnvelopedData Processing May Accept Forged Messages	n/a	No	9.1
CVE-2026-81380	GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability	N/A	No	5.3
CVE-2026-81381	GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-81383	Visual Studio Code Information Disclosure Vulnerability	Exploitation Less Likely	No	7.4
CVE-2026-70334	Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-78461	Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Less Likely	No	7.4
CVE-2026-78462	Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-81356	Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-81357	Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-81376	Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Less Likely	No	9.6
CVE-2026-81378	Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-81379	Visual Studio Code Security Feature Bypass Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-81377	Visual Studio Code Tampering Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-77906	Visual Studio Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77907	Visual Studio Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8

ESU vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-62810	Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69821	Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69395	Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69624	Active Directory Certificate Services (AD CS) Tampering Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69359	Active Directory Domain Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72978	Active Directory Federation Services (AD FS) Denial of Service Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69329	BranchCache Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69516	Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68824	Connected User Experiences and Telemetry Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68847	Connected User Experiences and Telemetry Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69470	Connected User Experiences and Telemetry Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69625	Connected User Experiences and Telemetry Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-73014	Data Sharing Service Client Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73006	DirectWrite Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73016	DirectWrite Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69576	Graphic Fonts Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72986	Graphic Fonts Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73018	Graphic Fonts Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73017	Graphics Kernel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69731	HID Class Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72983	Internet Connection Sharing (ICS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-68895	Internet Storage Name Service Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-72981	IP Helper Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69275	Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69900	Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-68852	Microsoft Account Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69299	Microsoft COM for Windows Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69294	Microsoft COM for Windows Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69491	Microsoft DirectMusic Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69378	Microsoft Exchange Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69380	Microsoft Exchange Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69641	Microsoft Exchange Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	9.1
CVE-2026-69382	Microsoft Exchange Server Information Disclosure Vulnerability	Exploitation Less Likely	No	5.9
CVE-2026-55007	Microsoft Exchange Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69355	Microsoft Exchange Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69356	Microsoft Exchange Server Spoofing Vulnerability	Exploitation Less Likely	No	9.3
CVE-2026-69361	Microsoft Exchange Server Spoofing Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69375	Microsoft Exchange Server Tampering Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69467	Microsoft Graphics Component Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-84000	Microsoft Graphics Component Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69605	Microsoft Install Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69325	Microsoft JScript Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69438	Microsoft JScript Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69277	Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69365	Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-68843	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69360	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77504	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69397	Microsoft OpenSSH for Windows Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-62801	Microsoft PowerShell Security Feature Bypass Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-68885	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68888	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68889	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-68890	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68892	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68897	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69269	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69271	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69272	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69313	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69336	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-68881	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-68891	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	4.7
CVE-2026-69308	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69345	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69367	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69376	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69824	Microsoft Standard XPS Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69276	Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69420	Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69427	Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-72933	Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-62706	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69386	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69408	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69511	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69601	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69586	Microsoft Windows PDF Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-78451	Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-78452	Microsoft Windows SCSI Class System File Information Disclosure Vulnerability	Exploitation Less Likely	No	4.6
CVE-2026-78453	Microsoft Windows SCSI Class System File Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69305	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-69585	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69600	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69608	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69911	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-70145	Microsoft Windows Search Component Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69453	Microsoft Windows Search Component Tampering Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69554	Microsoft Windows Search Component Tampering Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69444	Microsoft Windows Speech Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69456	Microsoft Windows Speech Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69531	Microsoft Windows Speech Tampering Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69807	PowerShell Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0

CVE-2026-69303	Push Message Routing Service Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-68828	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69358	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69485	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-83998	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69292	Remote Desktop Gateway Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69338	Remote Desktop Gateway Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-68893	Remote Desktop Licensing Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69514	Remote Desktop Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69525	Remote Desktop Services Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-69539	Remote Desktop Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69509	Role: Windows Fax Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69621	Role: Windows Fax Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-72944	Role: Windows Fax Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69819	RPC Runtime Library Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69568	Storage Spaces Controller Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69431	Telnet Client Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69384	Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69541	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation More Likely	No	7.8
CVE-2026-69549	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation Less Likely	No	7.0
CVE-2026-69611	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation Less Likely	No	7.0
CVE-2026-69681	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation Unlikely	No	8.0
CVE-2026-70574	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation Less Likely	No	7.8
CVE-2026-81355	Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69407	Volume Manager Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69418	Volume Manager Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69432	Volume Manager Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-72985	Volume Shadow Copy Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-69609	Win32k Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69808	Win32k Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69832	Win32k Information Disclosure Vulnerability	Exploitation More Likely	No	5.6
CVE-2026-69853	Win32k Information Disclosure Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-70290	Win32k Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69654	Windows Accounts Control Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69816	Windows Accounts Control Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-62762	Windows Active Directory Domain Services Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-62813	Windows Active Directory Domain Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69524	Windows Active Directory Domain Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69546	Windows Active Directory Domain Services Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-85880	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability	Exploitation Detected	No	7.8
CVE-2026-70565	Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69834	Windows ALPC Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69874	Windows ALPC Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.2
CVE-2026-50349	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-70342	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.1
CVE-2026-69311	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69394	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69540	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69604	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69692	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69801	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-70562	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-73005	Windows Authentication Methods Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-73004	Windows Autopilot Tampering Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69293	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69298	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69323	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8

CVE-2026-69352	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69476	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69489	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69580	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69583	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69589	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69593	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69727	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69738	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69773	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69787	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69826	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-70572	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-70573	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-70581	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72941	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-72988	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72990	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72991	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72992	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72993	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72994	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72995	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72996	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72997	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73000	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73001	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-73002	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73007	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73011	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-73015	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-73020	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73021	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73026	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-77489	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-78447	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-78448	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83954	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83955	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83967	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83968	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-83969	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83970	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-83971	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83972	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-83973	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83974	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83975	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83976	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83977	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83978	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83979	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83980	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-83981	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83982	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83983	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83985	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83986	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83987	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83988	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-73008	Windows Biometric Service Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69458	Windows BitLocker Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69449	Windows BitLocker Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.7
CVE-2026-69817	Windows Bluetooth Port Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68849	Windows Bluetooth Port Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	4.7
CVE-2026-69388	Windows Bluetooth Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69398	Windows Bluetooth Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69448	Windows Bluetooth Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69889	Windows Bluetooth Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-77892	Windows Boot Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-69735	Windows Broadcast DVR User Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69391	Windows Broker Infrastructure Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8

CVE-2026-69283	Windows CD-ROM Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69561	Windows CD-ROM Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-78454	Windows CD-ROM Driver Information Disclosure Vulnerability	Exploitation More Likely	No	5.5
CVE-2026-78508	Windows CD-ROM Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	4.6
CVE-2026-69279	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-80093	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-83991	Windows Cloud Files Mini Filter Driver Tampering Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69445	Windows Compressed Folder Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69496	Windows Compressed Folder Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69267	Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-70583	Windows Core Messaging Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-70584	Windows Core Messaging Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-70578	Windows Credential Guard Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69790	Windows Credential Providers Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69284	Windows DCOM Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-70568	Windows Defender Firewall Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-68831	Windows Defender Firewall Service Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69607	Windows Deployment Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72943	Windows Deployment Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72954	Windows Deployment Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72957	Windows Deployment Services Remote Code Execution Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69314	Windows Device Association Broker Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69693	Windows Device Association Broker Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69296	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69478	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69488	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69574	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69581	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69711	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69714	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.0
CVE-2026-69791	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69866	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-77500	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-83940	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69472	Windows Devices Human Interface Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69342	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69405	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	5.7
CVE-2026-69416	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	5.7
CVE-2026-69497	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69637	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-69679	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-70065	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77494	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77498	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-77499	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77501	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-77502	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-77886	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-77888	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77889	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77890	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77893	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-77895	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69415	Windows DHCP Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-69297	Windows DHCP Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69803	Windows DHCP Server Information Disclosure Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69929	Windows DHCP Server Information Disclosure Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69930	Windows DHCP Server Information Disclosure Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-70124	Windows DHCP Server Information Disclosure Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69266	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69412	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69510	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69547	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69620	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69845	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69847	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69876	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69878	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-72979	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-77887	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-77891	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-69715	Windows Direct Show Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8

CVE-2026-78446	Windows Distributed File System (DFS) Denial of Service Vulnerability	Exploitation Unlikely	No	5.3
CVE-2026-69424	Windows Distributed File System (DFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69631	Windows DNS Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-70091	Windows DNS Denial of Service Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69310	Windows DNS Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-72948	Windows DNS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.7
CVE-2026-69369	Windows DNS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69672	Windows DNS Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-72987	Windows DNS Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-78523	Windows DNS Server Denial of Service Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69551	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69730	Windows DNS Server Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-69782	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69813	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69827	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69989	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-77505	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69680	Windows DNS Spoofing Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69430	Windows Embedded Mode Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69688	Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-69841	Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69794	Windows Encrypting File System (EFS) Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69481	Windows Enterprise App Management Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69907	Windows Enterprise App Management Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68894	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69362	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69433	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69436	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69450	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69462	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69513	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69612	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83996	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69684	Windows Error Reporting Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69482	Windows Error Reporting Tampering Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-69493	Windows Event Logging Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69494	Windows Event Logging Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69495	Windows Event Logging Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69619	Windows exFAT File System Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-71338	Windows Failover Cluster Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-68878	Windows Fast FAT Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69347	Windows Fast FAT Driver Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.4
CVE-2026-68837	Windows File History Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71340	Windows File History Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-72947	Windows File History Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.4
CVE-2026-77491	Windows GDI Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-68827	Windows GDI+ Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69288	Windows GDI+ Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-77493	Windows Graphics Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-81955	Windows Graphics Component Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69717	Windows Group Policy Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69710	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69725	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69784	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69799	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69820	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.2
CVE-2026-69864	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-81354	Windows Hello Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-72980	Windows Hello Security Feature Bypass Vulnerability	Exploitation Unlikely	No	4.4
CVE-2026-69682	Windows Host Guardian Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69623	Windows HTTP Print Provider Remote Code Execution Vulnerability	Exploitation More Likely	No	8.0
CVE-2026-69769	Windows HTTP Print Provider Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69553	Windows Hyper-V Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-72961	Windows Hyper-V Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.2
CVE-2026-69603	Windows Hyper-V Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69910	Windows Hyper-V Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69341	Windows Image Acquisition Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69500	Windows Image Acquisition Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69613	Windows Image Acquisition Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69483	Windows Image Acquisition Information Disclosure Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-69318	Windows Imaging Component Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69499	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69860	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-70296	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-73013	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73023	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77495	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-83992	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-62694	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69441	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71339	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.7
CVE-2026-77894	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-72926	Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-72964	Windows Internet Connection Sharing (ICS) Tampering Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69881	Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69429	Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69694	Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68898	Windows iSCSI Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69598	Windows iSCSI Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69628	Windows iSCSI Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73025	Windows iSCSI Security Feature Bypass Vulnerability	Exploitation Unlikely	No	9.8

CVE-2026-69839	Windows iSCSI Target Service Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69760	Windows Kerberos Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69685	Windows Kerberos Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69822	Windows Kerberos Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69676	Windows Kerberos Remote Code Execution Vulnerability	Exploitation More Likely	No	8.8
CVE-2026-68846	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-68884	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69366	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-69466	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69473	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69578	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-83942	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-85360	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69406	Windows Kernel Information Disclosure Vulnerability	Exploitation More Likely	No	5.5
CVE-2026-69723	Windows Kernel Information Disclosure Vulnerability	Exploitation More Likely	No	5.7
CVE-2026-69669	Windows Kernel Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69421	Windows Kernel-Mode Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-84001	Windows Key Distribution Center Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69712	Windows Key Distribution Center Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69428	Windows LDAP – Lightweight Directory Access Protocol Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69281	Windows License Manager Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69315	Windows License Manager Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69732	Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69451	Windows Management Instrumentation Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-70582	Windows Management Instrumentation Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-77905	Windows Management Instrumentation Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69349	Windows Management Instrumentation Information Disclosure Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-73012	Windows Management Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69891	Windows Media Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-70203	Windows Media Player Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-72960	Windows Media Player Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69645	Windows Message Queuing Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-68887	Windows Message Queuing Queue Manager Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72932	Windows Message Queuing Queue Manager Information Disclosure Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69579	Windows Message Queuing Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-83997	Windows Message Queuing Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-70579	Windows Mobile Broadband Information Disclosure Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69377	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69460	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-70577	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-73003	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-73022	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69674	Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-72963	Windows Modern Execution Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69357	Windows NDIS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69396	Windows NDIS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-72982	Windows Netlogon Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-62759	Windows Netlogon Spoofing Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72967	Windows Network Connection Broker Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-68886	Windows Network Connection Broker Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69372	Windows Network File System Denial of Service Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-69772	Windows Network File System Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-71334	Windows NFS Portmapper Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69648	Windows Notification Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68832	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68834	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-68838	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-68841	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69265	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69312	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69332	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69340	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69505	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69532	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69567	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69875	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-72935	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.7
CVE-2026-77503	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.4
CVE-2026-83995	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68851	Windows NTFS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69504	Windows NTFS Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69591	Windows NTFS Information Disclosure Vulnerability	Exploitation Unlikely	No	5.7
CVE-2026-68833	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-68875	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69461	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69463	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69479	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.4
CVE-2026-69566	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-69638	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.4
CVE-2026-69709	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-71329	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-69564	Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69350	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.7
CVE-2026-69368	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69371	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69373	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.7
CVE-2026-69316	Windows Overlay Filter Information Disclosure Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-69343	Windows Overlay Filter Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69474	Windows Overlay Filter Information Disclosure Vulnerability	Exploitation Unlikely	No	4.8
CVE-2026-70586	Windows Paint Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8

CVE-2026-69480	Windows Partition Management Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69492	Windows Partition Management Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71341	Windows Partition Management Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69324	Windows Performance Monitor Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69459	Windows Power Dependency Coordinator Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69321	Windows Power Dependency Coordinator Tampering Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69569	Windows Print Spooler Components Denial of Service Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-68835	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-68848	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69309	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69346	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69364	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-69838	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69921	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-70564	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69344	Windows Print Spooler Components Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69552	Windows Print Spooler Components Information Disclosure Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-69602	Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-68845	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68876	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.0
CVE-2026-69534	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69563	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-68874	Windows Program Compatibility Assistant Service Information Disclosure Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-62697	Windows Push Notifications Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69280	Windows Push Notifications Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69337	Windows Registry Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-78449	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69331	Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69455	Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-71333	Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71342	Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-71343	Windows Remote Access Connection Manager Remote Code Execution Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-71352	Windows Remote Access Connection Manager Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-72966	Windows Remote Access Connection Manager Tampering Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-77896	Windows Remote Desktop Client Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69317	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-69627	Windows Remote Desktop Licensing Service Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-70587	Windows Remote Desktop Protocol Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69518	Windows Remote Desktop Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69287	Windows Remote Desktop Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69475	Windows Remote Desktop Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-80096	Windows Remote Desktop Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69616	Windows Remote Desktop Services Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69548	Windows RNDIS Information Disclosure Vulnerability	Exploitation Less Likely	No	4.6
CVE-2026-69768	Windows RNDIS Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-72939	Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-71351	Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71353	Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69590	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69852	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Exploitation More Likely	No	7.5
CVE-2026-70570	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72950	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-72959	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69713	Windows Secure Boot Security Feature Bypass Vulnerability	Exploitation Less Likely	No	4.4
CVE-2026-69501	Windows Secure Kernel Mode Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69846	Windows Secure Kernel Mode Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-69906	Windows Secure Kernel Mode Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-72931	Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-71332	Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-72930	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-73009	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-77899	Windows Security Center Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-56177	Windows Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-83989	Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-73024	Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-71330	Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69595	Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-70585	Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-78445	Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69289	Windows Setup Files Cleanup Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69829	Windows Shell Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-70563	Windows Shell Spoofing Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69785	Windows Smart Card Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69572	Windows SMB Client Information Disclosure Vulnerability	Exploitation Unlikely	No	5.7
CVE-2026-69618	Windows SMB Client Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69374	Windows SMB Server Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69403	Windows SMB Server Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69512	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69535	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69643	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69691	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69390	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69393	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-69741	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69770	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69895	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-72942	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69538	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-71345	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-71348	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-71349	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-71350	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-72952	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69328	Windows Storage Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-78516	Windows Storage Information Disclosure Vulnerability	Exploitation Unlikely	No	4.3
CVE-2026-69389	Windows Storage Management Provider Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-71337	Windows Storage Management Provider Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69381	Windows Storage Port Driver Information Disclosure Vulnerability	Exploitation Unlikely	No	4.6
CVE-2026-72937	Windows Storage Port Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-77492	Windows Storage Port Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69290	Windows Storage Spaces Controller Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69575	Windows Storage Spaces Controller Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68844	Windows Storage Spaces Controller Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68877	Windows Storage Spaces Controller Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72945	Windows Task Scheduler Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69385	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69404	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69757	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-69761	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-69793	Windows TCP/IP Security Feature Bypass Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69353	Windows Text Shaping Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69786	Windows Text Shaping Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69573	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69592	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69758	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-68830	Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69351	Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69434	Windows URL Moniker Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73019	Windows URL Moniker Security Feature Bypass Vulnerability	Exploitation Less Likely	No	4.3
CVE-2026-69270	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69307	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69413	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0

CVE-2026-69469	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.6
CVE-2026-69571	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69687	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69707	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69859	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69286	Windows USB Audio Class Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-68840	Windows USB Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69295	Windows USB Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69503	Windows USB Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-72953	Windows USB Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69457	Windows USB Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-72999	Windows USB Hub Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-69490	Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-69527	Windows USB Mass Storage Class Driver Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-68839	Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69319	Windows USB Video Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69423	Windows USB Video Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69584	Windows USB Video Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-72962	Windows USB Video Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.2
CVE-2026-56172	Windows VHD miniport driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69890	Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69426	Windows VOLSNAP.SYS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69468	Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69582	Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-77904	Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69291	Windows Volume Manager Extension Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69334	Windows Volume Manager Extension Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69708	Windows Web Platform Storage Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-72965	Windows WebClient Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68880	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.0
CVE-2026-69274	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-69301	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.0
CVE-2026-69335	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69410	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69498	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69610	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69630	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69652	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69689	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69706	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69762	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69779	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69844	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-70283	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-70289	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69792	Windows Win32K Security Feature Bypass Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-69517	Windows Wireless Networking Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69862	Windows Wireless Wide Area Network Service Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69560	Windows Work Folder Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71336	Windows Work Folder Service Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-80075	Windows Work Folders Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72927	Winsock Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.7
CVE-2026-78455	Xbox Information Disclosure Vulnerability	Exploitation Less Likely	No	4.3

Mariner vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2025-70873	An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.	n/a	No	7.5

Microsoft Dynamics vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-65772	Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77908	Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability	N/A	No	8.8
CVE-2026-77897	Microsoft Power Automate Desktop Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-65818	Power Automate Elevation of Privilege Vulnerability	N/A	No	8.5

Microsoft Office vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-80098	Copilot Studio Elevation of Privilege Vulnerability	N/A	No	9.3
CVE-2026-81387	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-81390	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-81391	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-81392	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-81393	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-81394	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-81395	Microsoft Excel Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-81399	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-81400	Microsoft Excel Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-81401	Microsoft Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-81958	Microsoft Excel Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-81386	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81388	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-81389	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-81396	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-81397	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81398	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81947	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81948	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81949	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-81950	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81951	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81953	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81954	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81956	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81957	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81959	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-81960	Microsoft Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-70178	Microsoft Fabric Elevation of Privilege Vulnerability	N/A	No	8.5
CVE-2026-69477	Microsoft Office Access Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-69529	Microsoft Office Access Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69614	Microsoft Office Access Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69778	Microsoft Office Access Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-72974	Microsoft Office Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-78515	Microsoft Office Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-85875	Microsoft Office Excel Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-78518	Microsoft Office Excel Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78439	Microsoft Office Graphics Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69626	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69739	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-80076	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-80078	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-80082	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-80087	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-80089	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-80091	Microsoft Office Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-78520	Microsoft Office Outlook Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-80073	Microsoft Office Outlook Information Disclosure Vulnerability	Exploitation Less Likely	No
CVE-2026-80084	Microsoft Office Outlook Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69629	Microsoft Office Outlook Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78509	Microsoft Office Outlook Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-78519	Microsoft Office Outlook Remote Code Execution Vulnerability	Exploitation Less Likely	No
CVE-2026-78525	Microsoft Office Outlook Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-72938	Microsoft Office PowerPoint Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-72956	Microsoft Office PowerPoint Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-72975	Microsoft Office PowerPoint Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-72977	Microsoft Office PowerPoint Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-78513	Microsoft Office PowerPoint Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-80086	Microsoft Office PowerPoint Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69678	Microsoft Office PowerPoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69767	Microsoft Office PowerPoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69797	Microsoft Office PowerPoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-80081	Microsoft Office PowerPoint Remote Code Execution Vulnerability	Exploitation Less Likely	No
CVE-2026-69742	Microsoft Office Publisher Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-81385	Microsoft Office Publisher Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69285	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69442	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69632	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77898	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-78505	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78524	Microsoft Office Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69464	Microsoft Office SharePoint Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69716	Microsoft Office SharePoint Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69409	Microsoft Office SharePoint Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69636	Microsoft Office SharePoint Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69683	Microsoft Office SharePoint Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69904	Microsoft Office SharePoint Information Disclosure Vulnerability	Exploitation Less Likely	No	3.5
CVE-2026-69268	Microsoft Office SharePoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69273	Microsoft Office SharePoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69282	Microsoft Office SharePoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69465	Microsoft Office SharePoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69724	Microsoft Office SharePoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69804	Microsoft Office SharePoint Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69402	Microsoft Office SharePoint Spoofing Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-69417	Microsoft Office SharePoint Spoofing Vulnerability	Exploitation Less Likely	No	7.3
CVE-2026-69615	Microsoft Office SharePoint Spoofing Vulnerability	Exploitation Unlikely	No	3.5
CVE-2026-69690	Microsoft Office SharePoint Spoofing Vulnerability	Exploitation Unlikely	No	4.6
CVE-2026-64918	Microsoft Office Spoofing Vulnerability	Exploitation Less Likely	No	6.5

CVE-2026-69719	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69734	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-72976	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No	5.0
CVE-2026-77911	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-78502	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-78503	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-78506	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-78522	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No
CVE-2026-80079	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No
CVE-2026-80088	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-80090	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-83949	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-83951	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69556	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69671	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69686	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69722	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69759	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69764	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-72972	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-72973	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77901	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78504	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78507	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78511	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78512	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78514	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78517	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78521	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78526	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-80080	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-80085	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-65812	Microsoft Teams for Android Information Disclosure Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-69559	Microsoft Teams for Android Information Disclosure Vulnerability	Exploitation Unlikely	No	5.8
CVE-2026-62804	Microsoft Word Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-78510	Microsoft Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-81952	Microsoft Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-66303	Skype for Business and Lync Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-66307	Skype for Business and Lync Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-66308	Skype for Business and Lync Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-66304	Skype for Business Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-66306	Skype for Business Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-66302	Skype for Business Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-63523	Skype for Business Spoofing Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-66305	Skype for Business Spoofing Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69642	Skype for Business Spoofing Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69646	Skype for Business Spoofing Vulnerability	Exploitation Less Likely	No	8.3
CVE-2026-81955	Windows Graphics Component Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8

Open Source Software vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-69805	.NET Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.5
CVE-2025-70873	An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.	n/a	No	7.5
CVE-2026-34182	CMS AuthEnvelopedData Processing May Accept Forged Messages	n/a	No	9.1

Server Software vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-69378	Microsoft Exchange Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69380	Microsoft Exchange Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69641	Microsoft Exchange Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	9.1
CVE-2026-69382	Microsoft Exchange Server Information Disclosure Vulnerability	Exploitation Less Likely	No	5.9
CVE-2026-55007	Microsoft Exchange Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69355	Microsoft Exchange Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69356	Microsoft Exchange Server Spoofing Vulnerability	Exploitation Less Likely	No	9.3
CVE-2026-69361	Microsoft Exchange Server Spoofing Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69375	Microsoft Exchange Server Tampering Vulnerability	Exploitation Less Likely	No	6.5

SQL Server vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-67376	Microsoft SQL Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-67633	Microsoft SQL Server Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-67641	Microsoft SQL Server Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-66814	Microsoft SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-66818	Microsoft SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-66819	Microsoft SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-67368	Microsoft SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-67370	Microsoft SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-67381	Microsoft SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-67369	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-67383	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-67386	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-67389	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-67390	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-67393	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-67624	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-67629	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-67630	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-67645	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-67648	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-68776	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-68777	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-68778	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-68779	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-68780	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-68781	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-68784	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69562	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-73029	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-77488	Microsoft SQL Server Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-47297	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-67373	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-67378	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.5
CVE-2026-67379	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.5
CVE-2026-67380	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-67384	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-67385	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-67388	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-67631	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-67636	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.5
CVE-2026-67638	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-67639	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-67642	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-67643	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-68775	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-68785	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	4.9
CVE-2026-68786	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-68787	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-77481	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-77482	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77484	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77486	Microsoft SQL Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-66816	Microsoft SQL Server Security Feature Bypass Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-66820	SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73028	SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77480	SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77483	SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77485	SQL Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-77487	SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78456	SQL Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78441	Windows OLE DB Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-78442	Windows OLE DB Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8

Windows vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-62810	Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69821	Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69395	Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69624	Active Directory Certificate Services (AD CS) Tampering Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69359	Active Directory Domain Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72978	Active Directory Federation Services (AD FS) Denial of Service Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69401	Audio Video Control Transport Protocol Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69329	BranchCache Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69516	Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68824	Connected User Experiences and Telemetry Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68847	Connected User Experiences and Telemetry Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69470	Connected User Experiences and Telemetry Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69625	Connected User Experiences and Telemetry Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-73014	Data Sharing Service Client Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73006	DirectWrite Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73016	DirectWrite Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69576	Graphic Fonts Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72986	Graphic Fonts Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73018	Graphic Fonts Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73017	Graphics Kernel Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-81353	HEIF Image Extensions Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58600	HEVC Video Extensions Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-58599	HEVC Video Extensions Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69731	HID Class Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72983	Internet Connection Sharing (ICS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-68895	Internet Storage Name Service Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-72981	IP Helper Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69275	Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69900	Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-68850	Microsoft Account Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68852	Microsoft Account Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69299	Microsoft COM for Windows Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69294	Microsoft COM for Windows Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69491	Microsoft DirectMusic Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-73010	Microsoft Failover Cluster Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-78444	Microsoft Failover Cluster Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69467	Microsoft Graphics Component Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-83990	Microsoft Graphics Component Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-84000	Microsoft Graphics Component Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69605	Microsoft Install Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69325	Microsoft JScript Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69438	Microsoft JScript Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69277	Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69365	Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69594	Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68843	Microsoft Office Word Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69360	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77504	Microsoft Office Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69397	Microsoft OpenSSH for Windows Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-62801	Microsoft PowerShell Security Feature Bypass Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-57098	Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-65669	Microsoft SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	9.6
CVE-2026-68885	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68888	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68889	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-68890	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68892	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68897	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69269	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69271	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69272	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69313	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69336	Microsoft Standard XPS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-68881	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-68891	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	4.7
CVE-2026-69308	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69345	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69367	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69376	Microsoft Standard XPS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69824	Microsoft Standard XPS Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-72946	Microsoft Storage Port Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-56198	Microsoft Trace Data Helper Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69276	Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69420	Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69427	Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-72933	Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-70351	Microsoft WebP Image Extension Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-62706	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-62744	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69386	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69408	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69511	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69601	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69586	Microsoft Windows PDF Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-78451	Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-78452	Microsoft Windows SCSI Class System File Information Disclosure Vulnerability	Exploitation Less Likely	No	4.6
CVE-2026-78453	Microsoft Windows SCSI Class System File Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-68896	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69305	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-69322	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69585	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69600	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69608	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69911	Microsoft Windows Search Component Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69507	Microsoft Windows Search Component Information Disclosure Vulnerability	Exploitation Unlikely	No	5.7
CVE-2026-70145	Microsoft Windows Search Component Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69453	Microsoft Windows Search Component Tampering Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69554	Microsoft Windows Search Component Tampering Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69444	Microsoft Windows Speech Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69456	Microsoft Windows Speech Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69531	Microsoft Windows Speech Tampering Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69807	PowerShell Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69303	Push Message Routing Service Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69649	Raw Image Extension Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8

CVE-2026-68828	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69358	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69485	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-78463	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-80074	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-80077	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-83998	Remote Desktop Client Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69292	Remote Desktop Gateway Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69338	Remote Desktop Gateway Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-68893	Remote Desktop Licensing Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69514	Remote Desktop Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69525	Remote Desktop Services Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-69536	Remote Desktop Services Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69539	Remote Desktop Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69599	Remote Desktop Services Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69509	Role: Windows Fax Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69621	Role: Windows Fax Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-72944	Role: Windows Fax Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69819	RPC Runtime Library Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69568	Storage Spaces Controller Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69431	Telnet Client Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69384	Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69541	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation More Likely	No	7.8
CVE-2026-69549	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation Less Likely	No	7.0
CVE-2026-69611	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation Less Likely	No	7.0
CVE-2026-69681	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation Unlikely	No	8.0
CVE-2026-70574	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability	Exploitation Less Likely	No	7.8
CVE-2026-81355	Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69407	Volume Manager Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69418	Volume Manager Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69432	Volume Manager Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-72985	Volume Shadow Copy Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-81352	Web Media Extensions Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69609	Win32k Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69808	Win32k Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69832	Win32k Information Disclosure Vulnerability	Exploitation More Likely	No	5.6
CVE-2026-69853	Win32k Information Disclosure Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-70290	Win32k Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69654	Windows Accounts Control Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69816	Windows Accounts Control Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-62762	Windows Active Directory Domain Services Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69809	Windows Active Directory Domain Services Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-62813	Windows Active Directory Domain Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69524	Windows Active Directory Domain Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69546	Windows Active Directory Domain Services Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-85880	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability	Exploitation Detected	No	7.8
CVE-2026-70565	Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69834	Windows ALPC Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69874	Windows ALPC Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.2
CVE-2026-50349	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-70342	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.1
CVE-2026-69311	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69394	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69447	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69540	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69604	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69692	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69801	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-70562	Windows Audio Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-73005	Windows Authentication Methods Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-73004	Windows Autopilot Tampering Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-68825	Windows Bind Filter Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69293	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69298	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69323	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69352	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69476	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69489	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69580	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69583	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69589	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69593	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69727	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69738	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69773	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69787	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69826	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-70572	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-70573	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-70581	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72941	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-72988	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72990	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72991	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72992	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72993	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72994	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72995	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72996	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72997	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73000	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73001	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-73002	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73007	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73011	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-73015	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-73020	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73021	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-73026	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-77489	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-78447	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-78448	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83954	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83955	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83967	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83968	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-83969	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83970	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-83971	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83972	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-83973	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83974	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83975	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83976	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83977	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83978	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83979	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83980	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-83981	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83982	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83983	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83985	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83986	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83987	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-83988	Windows Biometric Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-73008	Windows Biometric Service Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69458	Windows BitLocker Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69449	Windows BitLocker Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.7
CVE-2026-69817	Windows Bluetooth Port Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68849	Windows Bluetooth Port Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	4.7
CVE-2026-69388	Windows Bluetooth Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69398	Windows Bluetooth Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69448	Windows Bluetooth Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69889	Windows Bluetooth Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-77892	Windows Boot Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-69735	Windows Broadcast DVR User Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69391	Windows Broker Infrastructure Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69542	Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69283	Windows CD-ROM Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69561	Windows CD-ROM Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-78454	Windows CD-ROM Driver Information Disclosure Vulnerability	Exploitation More Likely	No	5.5
CVE-2026-78508	Windows CD-ROM Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	4.6
CVE-2026-69279	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-80093	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-83991	Windows Cloud Files Mini Filter Driver Tampering Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69445	Windows Compressed Folder Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-70019	Windows Compressed Folder Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69496	Windows Compressed Folder Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8

CVE-2026-69267	Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69771	Windows Container Manager Service Security Feature Bypass Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-70583	Windows Core Messaging Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-70584	Windows Core Messaging Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-70578	Windows Credential Guard Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-72958	Windows Credential Guard Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.2
CVE-2026-69790	Windows Credential Providers Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69814	Windows Credential Providers Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69729	Windows Credential Providers Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69284	Windows DCOM Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-70568	Windows Defender Firewall Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-68831	Windows Defender Firewall Service Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69607	Windows Deployment Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72943	Windows Deployment Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72954	Windows Deployment Services Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72957	Windows Deployment Services Remote Code Execution Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69314	Windows Device Association Broker Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69693	Windows Device Association Broker Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69296	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69478	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69488	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69574	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69581	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69711	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69714	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.0
CVE-2026-69791	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69866	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-77500	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-83940	Windows Device Association Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69443	Windows Device Health Attestation (DHA) Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69472	Windows Devices Human Interface Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69781	Windows DHCP Client Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69777	Windows DHCP Client Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.0
CVE-2026-69342	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69405	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	5.7
CVE-2026-69416	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	5.7
CVE-2026-69497	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69637	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-69679	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-70065	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77494	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77498	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-77499	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77501	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-77502	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-77886	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-77888	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77889	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77890	Windows DHCP Server Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-77893	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-77895	Windows DHCP Server Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69415	Windows DHCP Server Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-69297	Windows DHCP Server Information Disclosure Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69803	Windows DHCP Server Information Disclosure Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69929	Windows DHCP Server Information Disclosure Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69930	Windows DHCP Server Information Disclosure Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-70124	Windows DHCP Server Information Disclosure Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69266	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69412	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69510	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69547	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69620	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69845	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69847	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69876	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69878	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-72979	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-77887	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-77891	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-69715	Windows Direct Show Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-70567	Windows Display Enhancement Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-78446	Windows Distributed File System (DFS) Denial of Service Vulnerability	Exploitation Unlikely	No	5.3
CVE-2026-69424	Windows Distributed File System (DFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69631	Windows DNS Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-70091	Windows DNS Denial of Service Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69310	Windows DNS Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-72948	Windows DNS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.7
CVE-2026-69369	Windows DNS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69672	Windows DNS Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-72987	Windows DNS Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-78523	Windows DNS Server Denial of Service Vulnerability	Exploitation Unlikely	No	5.9
CVE-2026-69551	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69730	Windows DNS Server Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-69782	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69813	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69827	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69858	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69989	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-72928	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-77505	Windows DNS Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69680	Windows DNS Spoofing Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69775	Windows DWM Core Library Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69430	Windows Embedded Mode Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69688	Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-69841	Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69794	Windows Encrypting File System (EFS) Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69481	Windows Enterprise App Management Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69907	Windows Enterprise App Management Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68894	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69362	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69433	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69436	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69450	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69462	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69513	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69612	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69896	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-83996	Windows Error Reporting Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69684	Windows Error Reporting Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69482	Windows Error Reporting Tampering Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-69493	Windows Event Logging Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69494	Windows Event Logging Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69495	Windows Event Logging Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69619	Windows exFAT File System Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-71338	Windows Failover Cluster Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-72989	Windows Failover Cluster Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-68878	Windows Fast FAT Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69347	Windows Fast FAT Driver Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.4
CVE-2026-68837	Windows File History Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71340	Windows File History Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-72947	Windows File History Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.4
CVE-2026-77491	Windows GDI Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-68827	Windows GDI+ Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69288	Windows GDI+ Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-77493	Windows Graphics Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-81955	Windows Graphics Component Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69717	Windows Group Policy Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69710	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69725	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69740	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69784	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69799	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69820	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.2
CVE-2026-69864	Windows Hello Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-81354	Windows Hello Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-72980	Windows Hello Security Feature Bypass Vulnerability	Exploitation Unlikely	No	4.4
CVE-2026-69682	Windows Host Guardian Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69623	Windows HTTP Print Provider Remote Code Execution Vulnerability	Exploitation More Likely	No	8.0
CVE-2026-69769	Windows HTTP Print Provider Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69597	Windows HTTP.sys Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-69553	Windows Hyper-V Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-72961	Windows Hyper-V Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.2
CVE-2026-69603	Windows Hyper-V Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69910	Windows Hyper-V Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-80083	Windows Hyper-V Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69341	Windows Image Acquisition Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69500	Windows Image Acquisition Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69613	Windows Image Acquisition Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69483	Windows Image Acquisition Information Disclosure Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-69318	Windows Imaging Component Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69499	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69860	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-70296	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-73013	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73023	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-77495	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-83992	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-62694	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69441	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71339	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.7
CVE-2026-72929	Windows Installer Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-77894	Windows Installer Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-72926	Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-72964	Windows Internet Connection Sharing (ICS) Tampering Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69587	Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69881	Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69429	Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69694	Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68898	Windows iSCSI Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69598	Windows iSCSI Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69628	Windows iSCSI Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73025	Windows iSCSI Security Feature Bypass Vulnerability	Exploitation Unlikely	No	9.8

CVE-2026-69839	Windows iSCSI Target Service Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69744	Windows Kerberos Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69760	Windows Kerberos Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69685	Windows Kerberos Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69822	Windows Kerberos Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69676	Windows Kerberos Remote Code Execution Vulnerability	Exploitation More Likely	No	8.8
CVE-2026-68846	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-68884	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69366	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-69466	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69473	Windows Kernel Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69578	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-83942	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-85360	Windows Kernel Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69406	Windows Kernel Information Disclosure Vulnerability	Exploitation More Likely	No	5.5
CVE-2026-69723	Windows Kernel Information Disclosure Vulnerability	Exploitation More Likely	No	5.7
CVE-2026-69669	Windows Kernel Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69421	Windows Kernel-Mode Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-84001	Windows Key Distribution Center Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69712	Windows Key Distribution Center Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69428	Windows LDAP – Lightweight Directory Access Protocol Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69281	Windows License Manager Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69315	Windows License Manager Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69732	Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69451	Windows Management Instrumentation Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-70582	Windows Management Instrumentation Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.4
CVE-2026-77905	Windows Management Instrumentation Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69349	Windows Management Instrumentation Information Disclosure Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-73012	Windows Management Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69891	Windows Media Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-70203	Windows Media Player Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-72960	Windows Media Player Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69645	Windows Message Queuing Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-68887	Windows Message Queuing Queue Manager Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72932	Windows Message Queuing Queue Manager Information Disclosure Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69579	Windows Message Queuing Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-83997	Windows Message Queuing Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.1
CVE-2026-69440	Windows MIDI Service Module Elevation of Privileges Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69508	Windows MIDI Service Module Elevation of Privileges Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69720	Windows MIDI Service Module Elevation of Privileges Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-78464	Windows MIDI Service Module Elevation of Privileges Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-68842	Windows MIDI Service Module Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69339	Windows MIDI Service Module Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-70579	Windows Mobile Broadband Information Disclosure Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69377	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69460	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-70577	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-73003	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-73022	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69674	Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-72963	Windows Modern Execution Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69357	Windows NDIS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69396	Windows NDIS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-72982	Windows Netlogon Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-62759	Windows Netlogon Spoofing Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72967	Windows Network Connection Broker Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-68886	Windows Network Connection Broker Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69372	Windows Network File System Denial of Service Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-69772	Windows Network File System Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-71334	Windows NFS Portmapper Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69648	Windows Notification Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68832	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68834	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-68838	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-68841	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69265	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69312	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69332	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69340	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69379	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69505	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69532	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69567	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69875	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-72935	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.7
CVE-2026-77503	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.4
CVE-2026-83995	Windows NTFS Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68851	Windows NTFS Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69504	Windows NTFS Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69591	Windows NTFS Information Disclosure Vulnerability	Exploitation Unlikely	No	5.7
CVE-2026-68833	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-68875	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69461	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69463	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69479	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.4
CVE-2026-69566	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-69638	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.4
CVE-2026-69709	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-71329	Windows NTFS Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-69425	Windows NTFS Tampering Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-69564	Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69350	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.7
CVE-2026-69368	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69371	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69373	Windows Overlay Filter Elevation of Privilege Vulnerability	Exploitation Unlikely	No	6.7
CVE-2026-69316	Windows Overlay Filter Information Disclosure Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-69343	Windows Overlay Filter Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69474	Windows Overlay Filter Information Disclosure Vulnerability	Exploitation Unlikely	No	4.8
CVE-2026-70586	Windows Paint Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-69480	Windows Partition Management Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69492	Windows Partition Management Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71341	Windows Partition Management Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69324	Windows Performance Monitor Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69459	Windows Power Dependency Coordinator Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69321	Windows Power Dependency Coordinator Tampering Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69569	Windows Print Spooler Components Denial of Service Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-68835	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-68848	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69309	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69346	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69364	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-69838	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69921	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-70564	Windows Print Spooler Components Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69344	Windows Print Spooler Components Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69552	Windows Print Spooler Components Information Disclosure Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-85877	Windows Print Spooler Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69602	Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-68845	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68876	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.0
CVE-2026-69534	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69563	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-68873	Windows Program Compatibility Assistant Service Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-68874	Windows Program Compatibility Assistant Service Information Disclosure Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-62697	Windows Push Notifications Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69280	Windows Push Notifications Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69300	Windows Push Notifications Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69337	Windows Registry Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-69530	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-78449	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-78450	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69331	Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69455	Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-71333	Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71342	Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-71343	Windows Remote Access Connection Manager Remote Code Execution Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-71352	Windows Remote Access Connection Manager Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-72966	Windows Remote Access Connection Manager Tampering Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-77896	Windows Remote Desktop Client Denial of Service Vulnerability	Exploitation Less Likely	No	6.5
CVE-2026-69317	Windows Remote Desktop Client Information Disclosure Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-69627	Windows Remote Desktop Licensing Service Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-70587	Windows Remote Desktop Protocol Information Disclosure Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69518	Windows Remote Desktop Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69287	Windows Remote Desktop Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69475	Windows Remote Desktop Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-80096	Windows Remote Desktop Services Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69616	Windows Remote Desktop Services Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-83999	Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69617	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-83952	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69548	Windows RNDIS Information Disclosure Vulnerability	Exploitation Less Likely	No	4.6
CVE-2026-69768	Windows RNDIS Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-72939	Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-71351	Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71353	Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69590	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69852	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Exploitation More Likely	No	7.5
CVE-2026-70570	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-72950	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-72959	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-70575	Windows Schannel Denial of Service Vulnerability	Exploitation Unlikely	No	5.3
CVE-2026-72940	Windows Schannel Remote Code Execution Vulnerability	Exploitation More Likely	No	8.8
CVE-2026-69713	Windows Secure Boot Security Feature Bypass Vulnerability	Exploitation Less Likely	No	4.4
CVE-2026-69501	Windows Secure Kernel Mode Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69846	Windows Secure Kernel Mode Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-69906	Windows Secure Kernel Mode Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-83939	Windows Secure Kernel Mode Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.2
CVE-2026-72931	Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-71332	Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-72930	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-73009	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8

CVE-2026-77899	Windows Security Center Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-78457	Windows Security Health Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-56177	Windows Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-83989	Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-73024	Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-71330	Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69595	Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-70585	Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-78445	Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69289	Windows Setup Files Cleanup Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69383	Windows Shell Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69392	Windows Shell Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69528	Windows Shell Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69606	Windows Shell Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69829	Windows Shell Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-70563	Windows Shell Spoofing Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69785	Windows Smart Card Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69544	Windows SMB Client Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69572	Windows SMB Client Information Disclosure Vulnerability	Exploitation Unlikely	No	5.7
CVE-2026-69618	Windows SMB Client Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-72936	Windows SMB Client Remote Code Execution Vulnerability	Exploitation More Likely	No	8.1
CVE-2026-69374	Windows SMB Server Denial of Service Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69403	Windows SMB Server Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-72949	Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability	Exploitation Less Likely	No	7.5
CVE-2026-69512	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69535	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69643	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69691	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-70569	Windows Spaceport.sys Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69390	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69393	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Less Likely	No	5.7
CVE-2026-69741	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69770	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69895	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-72942	Windows Spaceport.sys Information Disclosure Vulnerability	Exploitation Unlikely	No	6.5
CVE-2026-69538	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-71345	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-71348	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-71349	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Unlikely	No	6.8
CVE-2026-71350	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-72952	Windows Spaceport.sys Remote Code Execution Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69328	Windows Storage Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-78516	Windows Storage Information Disclosure Vulnerability	Exploitation Unlikely	No	4.3
CVE-2026-69389	Windows Storage Management Provider Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-71337	Windows Storage Management Provider Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69381	Windows Storage Port Driver Information Disclosure Vulnerability	Exploitation Unlikely	No	4.6
CVE-2026-72937	Windows Storage Port Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-77492	Windows Storage Port Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69290	Windows Storage Spaces Controller Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69575	Windows Storage Spaces Controller Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-68844	Windows Storage Spaces Controller Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68877	Windows Storage Spaces Controller Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72945	Windows Task Scheduler Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69588	Windows TCP/IP Denial of Service Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69385	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69404	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69757	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-69761	Windows TCP/IP Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.1
CVE-2026-69793	Windows TCP/IP Security Feature Bypass Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-69353	Windows Text Shaping Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69786	Windows Text Shaping Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.1
CVE-2026-69573	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69592	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69758	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-68830	Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-69351	Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-81963	Windows Update Stack Elevation of Privilege Vulnerability	Exploitation Detected	No	7.8
CVE-2026-69434	Windows URL Moniker Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-73019	Windows URL Moniker Security Feature Bypass Vulnerability	Exploitation Less Likely	No	4.3
CVE-2026-69270	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69307	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69413	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69469	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.6
CVE-2026-69571	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69687	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69707	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69859	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69286	Windows USB Audio Class Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-68840	Windows USB Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69295	Windows USB Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69503	Windows USB Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-72953	Windows USB Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69457	Windows USB Driver Information Disclosure Vulnerability	Exploitation Less Likely	No	5.5
CVE-2026-72999	Windows USB Hub Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-69490	Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.8
CVE-2026-69527	Windows USB Mass Storage Class Driver Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-68839	Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69319	Windows USB Video Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69422	Windows USB Video Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69423	Windows USB Video Driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69584	Windows USB Video Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-72962	Windows USB Video Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.2
CVE-2026-56172	Windows VHD miniport driver Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69890	Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.5
CVE-2026-83498	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-83501	Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability	Exploitation More Likely	No	5.5
CVE-2026-69426	Windows VOLSNAP.SYS Remote Code Execution Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-69468	Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69582	Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-77904	Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-69291	Windows Volume Manager Extension Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69334	Windows Volume Manager Extension Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	8.8
CVE-2026-69708	Windows Web Platform Storage Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-72965	Windows WebClient Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-68880	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.0
CVE-2026-69274	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.1
CVE-2026-69301	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	8.0
CVE-2026-69333	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69335	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69348	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8

CVE-2026-69410	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69498	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69610	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69630	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69652	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69689	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	8.0
CVE-2026-69706	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.1
CVE-2026-69762	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	8.0
CVE-2026-69779	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.0
CVE-2026-69818	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.0
CVE-2026-69844	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Unlikely	No	7.8
CVE-2026-70283	Windows Win32k Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-70289	Windows Win32k Elevation of Privilege Vulnerability	Exploitation More Likely	No	7.8
CVE-2026-69792	Windows Win32K Security Feature Bypass Vulnerability	Exploitation Unlikely	No	4.7
CVE-2026-69517	Windows Wireless Networking Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-69862	Windows Wireless Wide Area Network Service Information Disclosure Vulnerability	Exploitation Unlikely	No	5.5
CVE-2026-69560	Windows Work Folder Service Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.0
CVE-2026-71336	Windows Work Folder Service Remote Code Execution Vulnerability	Exploitation Unlikely	No	8.8
CVE-2026-80075	Windows Work Folders Elevation of Privilege Vulnerability	Exploitation Less Likely	No	7.8
CVE-2026-72927	Winsock Elevation of Privilege Vulnerability	Exploitation Less Likely	No	6.7
CVE-2026-78455	Xbox Information Disclosure Vulnerability	Exploitation Less Likely	No	4.3

Uncategorized Vulnerabilities

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-19931	Negotiate ambient user conn reuse	n/a	No	6.5
CVE-2026-82208	wolfSSL CA-cache hit overrides callback	n/a	No	7.4
CVE-2026-13608	OpenLDAP SASL authentication bypass	n/a	No	3.7
CVE-2026-18924	HTTP/2 server push UAF	n/a	No	5.9

Zero-Day Vulnerabilities: Known Exploited

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-85880	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability	Exploitation Detected	No	7.8
CVE-2026-81963	Windows Update Stack Elevation of Privilege Vulnerability	Exploitation Detected	No	7.8

Critical RCEs and EoPs

CVE	Title	Exploitation status	Publicly disclosed?	CVSS v3 base score
CVE-2026-70352	Azure AI Language Elevation of Privilege Vulnerability	N/A	No	10.0
CVE-2026-80098	Copilot Studio Elevation of Privilege Vulnerability	N/A	No	9.3
CVE-2026-83941	Entra ID Elevation of Privilege Vulnerability	N/A	No	9.9
CVE-2026-72983	Internet Connection Sharing (ICS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-83711	Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability	N/A	No	10.0
CVE-2026-69491	Microsoft DirectMusic Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-62916	Microsoft Entra ID Elevation of Privilege Vulnerability	N/A	No	9.1
CVE-2026-69641	Microsoft Exchange Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	9.1
CVE-2026-73010	Microsoft Failover Cluster Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-78509	Microsoft Office Outlook Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-65669	Microsoft SQL Server Elevation of Privilege Vulnerability	Exploitation Less Likely	No	9.6
CVE-2026-69824	Microsoft Standard XPS Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69276	Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69408	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69586	Microsoft Windows PDF Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-78510	Microsoft Word Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69525	Remote Desktop Services Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-69819	RPC Runtime Library Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-66302	Skype for Business Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69854	Spring Cloud Azure Elevation of Privilege Vulnerability	Exploitation More Likely	No	9.0
CVE-2026-69431	Telnet Client Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69496	Windows Compressed Folder Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69845	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-72979	Windows DHCP Server Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69715	Windows Direct Show Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69730	Windows DNS Server Remote Code Execution Vulnerability	Exploitation More Likely	No	9.8
CVE-2026-69493	Windows Event Logging Service Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-77493	Windows Graphics Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69769	Windows HTTP Print Provider Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69910	Windows Hyper-V Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-70296	Windows Imaging Component Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69669	Windows Kernel Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69579	Windows Message Queuing Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-72982	Windows Netlogon Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69463	Windows NTFS Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69768	Windows RNDIS Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-69590	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-73009	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69595	Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-78445	Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8
CVE-2026-69829	Windows Shell Remote Code Execution Vulnerability	Exploitation Unlikely	No	9.8
CVE-2026-68839	Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability	Exploitation Less Likely	No	9.8

Patch Tuesday – August 2026

2026-08-12 Adam Barnett

Post Syndicated from Adam Barnett original https://www.rapid7.com/blog/post/em-patch-tuesday-august-2026

Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever return to the lower volumes we saw prior to 2026. Microsoft is aware of exploitation in the wild for one of the vulnerabilities published today, as well as public disclosure for two others, although the Notable CVEs section of the Security Update Guide omits one of these. As usual, browser vulns are not included in the Patch Tuesday count above, but unusually, Microsoft does not appear to have published any desktop browser security patches so far this month.

SharePoint: critical RCE chain by Rapid7

Today sees the publication of CVE-2026-63520, a high-severity remote code execution in Microsoft SharePoint. Discovered by Rapid7 Senior Principal Security Researcher Stephen Fewer, and published today in coordination with Microsoft; this vulnerability is the second in a pair of exploits which, when chained together, comprise a critical unauthenticated remote code execution vulnerability in a vulnerable SharePoint server. Patches are available for SharePoint Server Subscription Edition, 2019, and 2016. Alongside today’s coordinated disclosure of CVE-2026-63520, Rapid7 has now published a detailed technical analysis and proof-of-concept for CVE-2026-55040, the first vulnerability in the chain.

AFD for Winsock: zero-day EoP

Rapid7 has previously discussed the Windows Ancillary Function Driver for WinSock, and today it returns to center stage with another exploited-in-the-wild elevation-of-privilege vulnerability. Successful exploitation requires winning a race condition, which increases the difficulty of producing a stable exploit. This also helps keep the CVSS v3 base score down to 7.0, along with a Microsoft proprietary severity ranking of merely important, rather than critical. However, with no user interaction required, and a prize of SYSTEM-level access, CVE-2026-68820 is just what the doctor ordered, if the doctor is based in Pyongyang and wants to steal your cryptocurrency. Microsoft credits CVE-2026-68820 to researchers at Check Point (misspelled “Checkpoint” on the advisory). CVE-2026-68820 isn’t yet listed on CISA KEV, but it will be soon.

What’s the opposite of coordinated disclosure?

This month’s entry in the ongoing saga of Microsoft vs. a pseudonymous security researcher with a clear dislike of Microsoft comes in the form of CVE-2026-62832, an elevation of privilege vulnerability in the Windows User Profile Service. Exploitation leads to administrator rights on the local asset, and is achieved via a specially crafted application, which is Microsoft corporate argot for exploit code. Between the public disclosure and the FAQ, which describes an authenticated attacker who has credentials for another account and loads another user’s registry hive, the advisory is a solid match for Nightmare Eclipse’s description of LegacyHive, which Rapid7 discussed last month.

Patch Tuesday watchers will have been wondering whether Nightmare Eclipse would continue the pattern of the past few months by dropping yet another zero-day vuln late on Patch Tuesday to maximize friction and inconvenience for Microsoft. Wonder no more, because the new entry on this growing list of headaches is ShieldBreak. Nightmare Eclipse describes ShieldBreak as a full patch bypass for RoguePlanet, a previous entry in the series which Microsoft patched as CVE-2026-50656 during July, a month after its public disclosure. Both vulnerabilities are therefore elevation-of-privilege to SYSTEM vulnerabilities in Defender.

Container isolation filesystem driver: isolation failure, tampering

CVE-2026-72971 describes a tampering vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys), where abuse of a flaw in the vulnerable driver presumably allows an unauthorized attacker to overwrite certain files. Since this might include an action taken within a container leading to an unauthorized impact outside the container, it might be surprising that the advisory claims no scope change. Presumably Microsoft is leaning on the fact that the vulnerability is within a driver which operates entirely within a single security authority, i.e. kernel space, so there is only one impacted component and no scope change according to the CVSS v3 spec. Still, the low CVSS v3 base score of 5.5 probably isn’t telling the whole story in this case.

Vulnerabilities classed as tampering are somewhat rare in the Microsoft corpus, making up just a few dozen of the thousands of unique vulnerabilities which MSRC has ever patched or otherwise addressed. CVE-2026-72971 isn’t mentioned in the Notable CVEs section of the new slimline Security Update Guide. Should it be? Perhaps, because Microsoft is aware of public disclosure in this case, but then again the categorization as tampering means that Microsoft is not currently aware of a path to a more severe impact such as elevation of privilege or code execution. The advisory acknowledges a pair of pseudonymous reporters, who also receive credit on at least 40 other advisories over the past few months, across a wide variety of Windows components and Microsoft Office, including 11 critical vulnerabilities.

Edge: update slowdown?

Typically, Microsoft patches a fair few browser vulnerabilities between the start of each month and that month’s Patch Tuesday, but not this month. Conspicuous by its absence at the time of Patch Tuesday publication today was Microsoft Edge, which receives regular batches of patches as a downstream consumer of Google Chromium. At the moment of Patch Tuesday publication, the desktop incarnations of Edge last received security patches on July 31, 2026. Meanwhile, the Chrome Stable Channel received patches for 41 vulnerabilities on August 6, 2026. Anyone responsible for assets with Microsoft Edge installed will be relieved to know that patches for Edge eventually emerged a few hours later on Patch Tuesday itself, but five days is still a longer unpatched gap between Chrome and Edge than has been typical in the past.