The November 2026 Security Update Review

Zero Day Initiative · 1 hour ago Vuln

The penultimate month of 2026 bring with it the usual storm of patches from Microsoft and Adobe. I’ve been prototyping some new ways to display this data, but as always, I’m open to suggestions. Seriously – hit me up on Bluesky if you have any ideas. If you’d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.Adobe Patches for November 2026For the first part of the November release, Adobe released nine bulletins addressing 110 unique CVEs in Adobe Connect, Experience Manager, After Effects, Audition, Dimension, Photoshop, Media Encoder, Premiere, and Content Credentials SDK.Here’s this month’s overview table: Adobe Patches for November 2026 Bulletin IDProductCVE CountHighest SeverityHighest CVSSExploitedDeployment Priority APSB26-191Adobe Connect24Critical10.0No2 APSB26-189Adobe Experience Manager14Critical9.9No2 APSB26-102Adobe Audition11High8.7No3 APSB26-100Adobe After Effects17High8.6No3 APSB26-190Adobe Dimension1High8.2No3 APSB26-181Adobe Photoshop13High7.8No3 APSB26-101Adobe Premiere11High7.8No3 APSB26-103Adobe Media Encoder6High7.8No3 APSB26-184Content Credentials SDK13Medium6.5No3 TOTAL9 bulletins110 Obviously, if you need to prioritize, the Connect patch is the biggest and most severe bulletin this month: 24 CVEs, 18 of them Critical, with a top CVSS of 10.0. It’s Priority 2, and Adobe is not aware of any exploits in the wild. Each of the CVSS10 bugs are reachable over the network with no authentication or user interaction, and each changes scope. The other Critical-rated update for this month is in Experience Manager. It addresses 14 CVEs, which includes four Critical bugs with a CVSS 9.9 rating. Two are incorrect-authorization bugs and two are code injections. All give arbitrary code execution over the network. Each needs a low-privileged account but no user interaction, and each changes scope.Besides the bugs already mentioned, all other patched from Adobe are a Deployment Priority 3. None of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.Microsoft Patches for November 2026Well, at least it’s not a new record for Microsoft. As always, the overall count is a bit confusing, but I see about 1,090 new CVEs released today. At this point, does the exact number actually matter? Regardless of the actual count, it’s huge but less than the 1,400 or so released last month. That’s two months in a row that have exceeded all previous years from Microsoft. As for the products affected by this release, we have Windows and Windows components; Office and Office Components; Windows networking and remote access; Windows graphics, media and printing; Windows storage file systems and drivers; .NET and Visual Studio; Windows Security and identity; Azure, cloud and identity; Exchange Server; Microsoft Dynamics; and Xbox. We’ll see how close I came to matching Microsoft’s “Cohorts” list. Interestingly, there is only one bug under active attack, and none are publicly known this month. While this is encouraging, it does not mean we’re seeing less exploitation in the wild. It does mean we are seeing fewer 0-days exploited in the wild. This makes sense, as AI is better at reversing patches than it is at finding and exploiting bugs in closed-source software. Let’s begin by covering some of the more severe and interesting patches released this month.-              CVE-2026-124194 - Microsoft Outlook Spoofing VulnerabilityThis is the one bug under active attack this month. It’s labeled spoofing, but the impact is bigger than the name suggests. An attacker sends a specially crafted message file and convinces a user to open it. Outlook then connects to an attacker-controlled network location without showing the usual external-content warning, which discloses the user’s NTLMv2 hash. The attacker can use that hash to authenticate as the user. The Preview Pane is not an attack vector, and the CVSS is only 6.5, so don’t let the score lull you. Microsoft marks it as exploited, so this one goes to the top of the list.-              CVE-2026-116928 - Windows Search Remote Code Execution VulnerabilityWe start with Windows Search, which is reached through Exchange Server. This bug allows an unauthenticated attacker to send an email with a specially crafted attachment that triggers the bug when the server automatically indexes it. The recipient never opens anything. It is a zero-click code execution bug on a high-value target. It’s also a CVSS 9.8 and clearly more severe than any of the nine patches Exchange receives this month.-              CVE-2026-119958 - Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityThis patch addresses a bug that allows an unauthenticated attacker to exploit an out-of-bounds (OOB) write (CWE-787) by sending crafted LDAP calls over the network, with no user interaction. Since it runs code in the LDAP service context, it could be quite destructive, especially on Domain Controllers. Test and deploy this one quickly.-              CVE-2026-119990 - Azure OpenAI Elevation of Privilege VulnerabilityThis is an odd duck. The bulletin says “Customer Action Required: Yes” for this bug, but nothing in the advisory tells customers what to do. There are no mitigations, workarounds, or customer steps. The FAQ says an unauthenticated attacker can send a crafted request over the internet to an affected Azure OpenAI service, with no account or user interaction. The impact is access to orchestration information, workflow changes, or service disruption. Hopefully, Microsoft adds some direction here soon.-              CVE-2026-119952 - Windows Schannel Remote Code Execution VulnerabilityThis flaw allows an unauthenticated attacker to exploit arbitrary code over a network without user interaction. Microsoft rates this bug as “Exploitation More Likely”. It is one of only a few Critical-rated patches with that rating. They also list the attack complexity as high, which is why the CVSS score is lower than the others. I would still put this near the top of my list.-              CVE-2026-95962 - Windows Virtual Filtering Platform (VFP) Remote Code Execution VulnerabilityI include this one because it’s in a little-documented component. It’s not the first CVE in VFP, but it appears to be just the second. It’s a use-after-free that allows an unauthenticated attacker to get code execution on affected targets by sending a specially crafted packet to the affected service over the network. No authentication or user interaction is needed. There is a race condition here, but we see those overcome all the time at Pwn2Own. This should be an interesting component to watch.-              CVE-2026-112967 - Windows Xbox Live Networking Service Remote Code Execution VulnerabilityYou don’t see a lot of Xbox Live bugs, but here we are with a CVSS 9.8.  This bug is a heap overflow that doesn’t need authentication or user interaction. Microsoft states the attacker can “gain remote code execution via an in-network attacker calling arbitrary endpoints.” Is this really likely? Probably not, but it’s fun to think of Xbox Live exploits in the wild.On to those that are Wormable…Last month saw 59 bugs that fit this definition. This month, it’s a bit less. A total of 30 of the November CVEs fit my definition of wormable. Specifically, 17 contain the advisory language describing an unauthenticated attacker executing code over the network with no authentication or user interaction required. The other 13 use variant wording or have no FAQ, but their summaries and CVSS vectors (AV:N/PR:N/UI:N) describe the same thing. These bugs are as follows:Message Queuing (5): CVE-2026-116710, 119963, 119964, 109459, 119967DNS (4): CVE-2026-81384, 96092, 96177, 88218Two each (8): Color Management (CVE-2026-96067, 96078), DHCP Server (CVE-2026-88243, 72998), DirectMusic (CVE-2026-95882, 95901) and Xbox (CVE-2026-112967, 66801)One each (13): Exchange Server (CVE-2026-116928), LDAP (CVE-2026-119958), Schannel (CVE-2026-119952), CredSSP (CVE-2026-119962), Deployment Services (CVE-2026-119951), IIS (CVE-2026-119961), NAT (CVE-2026-113862), RPC Runtime (CVE-2026-118737), Media Foundation (CVE-2026-96157), iSCSI (CVE-2026-88234), Virtual Filtering Platform (CVE-2026-95962), eSCL Scanner (CVE-2026-95956) and Modern Device Management (CVE-2026-119945)I may be wrong about some of these, since a few advisories are light on detail. As always, I recommend testing and deploying these patches quickly, especially for network-facing services like DNS, DHCP, LDAP, and ExchangeHere’s the full list of CVEs released by Microsoft for November 2026: CVE Title Severity CVSS Public Exploited XI Type CVE-2026-124194 Microsoft Outlook Spoofing Vulnerability Moderate 6.5 No Yes 0 Spoofing CVE-2026-118148 Active Directory Domain Services Elevation of Privilege Vulnerability Critical 7.5 No No 1 EoP CVE-2026-114160 Azure Managed Grafana Elevation of Privilege Vulnerability Critical 9.8 No No 2 EoP CVE-2026-119990 Azure OpenAI Elevation of Privilege Vulnerability Critical 9.8 No No N/A EoP CVE-2026-119969 Graphic Fonts Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-122194 Microsoft Defender Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-118207 Microsoft Exchange Server Remote Code Execution Vulnerability Critical 8.8 No No 1 RCE CVE-2026-118292 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-118296 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-118297 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-118701 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-118702 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-118711 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-118713 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-118730 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-120786 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-120788 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-120789 Microsoft Office Excel Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-124170 Microsoft Office Excel Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE CVE-2026-110043 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-110068 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-111309 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-111289 Microsoft Office Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-120003 Microsoft Office Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-110047 Microsoft Office Word Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-110067 Microsoft Office Word Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-111285 Microsoft Office Word Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-124185 Microsoft Office Word Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE CVE-2026-120005 Microsoft PowerPoint Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-113749 Microsoft Windows Codecs Library Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE CVE-2026-118737 Remote Procedure Call Runtime Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE CVE-2026-118146 Windows Active Directory Domain Services Remote Code Execution Vulnerability Critical 8.8 No No 1 RCE CVE-2026-119962 Windows CredSSP Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE CVE-2026-119951 Windows Deployment Services Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE CVE-2026-125134 Windows Function Discovery Resource Publication Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE CVE-2026-118145 Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE CVE-2026-119966 Windows Graphics Kernel Elevation of Privilege Vulnerability Critical 7.5 No No 2 EoP CVE-2026-125137 Windows Graphics Kernel Elevation of Privilege Vulnerability Critical 7.8 No No 2 EoP CVE-2026-113753 Windows Hyper-V Elevation of Privilege Vulnerability Critical 8.2 No No 2 EoP CVE-2026-113856 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.8 No No 2 EoP CVE-2026-113860 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7 No No 2 EoP CVE-2026-113861 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.5 No No 2 EoP CVE-2026-113864 Windows Hyper-V Elevation of Privilege Vulnerability Critical 6.4 No No 2 EoP CVE-2026-113865 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.8 No No 2 EoP CVE-2026-119947 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.5 No No 2 EoP CVE-2026-119960 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.5 No No 2 EoP CVE-2026-119961 Windows Internet Information Services Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE CVE-2026-119958 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability Critical 9.8 No No 2 RCE CVE-2026-109459 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE CVE-2026-119967 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE CVE-2026-116710 Windows Message Queuing Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE CVE-2026-119963 Windows Message Queuing Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE CVE-2026-119964 Windows Message Queuing Remote Code Execution Vulnerability Critical 8.1 No No 2 RCE CVE-2026-113862 Windows Network Address Translation (NAT) Remote Code Execution Vulnerability Critical 8.1 No No 1 RCE CVE-2026-125136 Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-113752 Windows Print Spooler Components Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE CVE-2026-114169 Windows Raw Image Extension Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE CVE-2026-119957 Windows Remote Desktop Services Elevation of Privilege Vulnerability Critical 7.8 No No 2 EoP CVE-2026-113825 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE CVE-2026-119952 Windows Schannel Remote Code Execution Vulnerability Critical 8.1 No No 1 RCE CVE-2026-116928 Windows Search Remote Code Execution Vulnerability Critical 9.8 No No 2 RCE CVE-2026-113859 Windows TCP/IP Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE CVE-2026-119382 Windows TPM Elevation of Privilege Vulnerability Critical 7.8 No No 2 EoP CVE-2026-112967 Windows Xbox Live Networking Service Remote Code Execution Vulnerability Critical 9.8 No No 2 RCE CVE-2026-109475 .NET Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-118747 .NET Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-120796 .NET Denial of Service Vulnerability Important 5.3 No No 2 DoS CVE-2026-105544 .NET Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-114155 .NET Elevation of Privilege Vulnerability Important 7.5 No No N/A EoP CVE-2026-118746 .NET Security Feature Bypass Vulnerability Important 6.8 No No 2 SFB CVE-2026-84004 AMD Zen Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-84005 AMD Zen Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-109478 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-114147 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-114149 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-114154 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-118748 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-118749 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-118750 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-109481 ASP.NET Core Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-114146 ASP.NET Core Elevation of Privilege Vulnerability Important 9 No No 2 EoP CVE-2026-118741 ASP.NET Core Elevation of Privilege Vulnerability Important 8.1 No No 2 EoP CVE-2026-109476 ASP.NET Core Information Disclosure Vulnerability Important 6.1 No No 2 Info CVE-2026-114150 ASP.NET Core Information Disclosure Vulnerability Important 5.9 No No 2 Info CVE-2026-114156 ASP.NET Core Security Feature Bypass Vulnerability Important 6.5 No No 2 SFB CVE-2026-114157 ASP.NET Core Security Feature Bypass Vulnerability Important 7.5 No No 2 SFB CVE-2026-118735 Active Directory Domain Services Elevation of Privilege Vulnerability Important 7.5 No No 3 EoP CVE-2026-123387 Active Directory Domain Services Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-119889 ActiveSyncProvider Information Disclosure Vulnerability Important 6.5 No No 3 Info CVE-2026-120006 Aspire Elevation of Privilege Vulnerability Important No No 2 EoP CVE-2026-120778 Aspire Elevation of Privilege Vulnerability Important 7.3 No No 2 EoP CVE-2026-120792 Aspire Information Disclosure Vulnerability Important 7.3 No No 2 Info CVE-2026-118740 Aspire Security Feature Bypass Vulnerability Important 9.1 No No 2 SFB CVE-2026-109457 Azure CLI Remote Code Execution Vulnerability Important 8 No No 2 RCE CVE-2026-121668 Azure Confidential Clean Rooms Tampering Vulnerability Important No No 2 Tampering CVE-2026-102224 Azure CycleCloud Elevation of Privilege Vulnerability Important 8.4 No No 2 EoP CVE-2026-113822 Azure CycleCloud Elevation of Privilege Vulnerability Important 6.5 No No N/A EoP CVE-2026-114161 Azure CycleCloud Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-113823 Azure CycleCloud Information Disclosure Vulnerability Important 7.5 No No 2 Info CVE-2026-120783 Azure DevOps Server Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP CVE-2026-85923 Azure DevOps Server Elevation of Privilege Vulnerability Important 8.8 No No N/A EoP CVE-2026-112745 Azure DevOps Server Information Disclosure Vulnerability Important 6.5 No No 1 Info CVE-2026-109467 Azure DevOps Server Remote Code Execution Vulnerability Important 9.9 No No N/A RCE CVE-2026-109462 Azure Firmware Security Feature Bypass Vulnerability Important 4.4 No No 2 SFB CVE-2026-118742 Azure Front Door Elevation of Privilege Vulnerability Important 8.6 No No N/A EoP CVE-2026-105494 Azure NFS mount helper (aznfs) Elevation of Privilege Vulnerability Important No No 2 EoP CVE-2026-119989 Azure Pipelines Remote Code Execution Vulnerability Important 8.2 No No 2 RCE CVE-2026-96007 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119883 Data Deduplication Security Feature Bypass Vulnerability Important 3.3 No No 2 SFB CVE-2026-95963 Data Sharing Service Client Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-105528 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105581 Desktop Window Manager Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-113819 Desktop Window Manager Elevation of Privilege Vulnerability Important 7 No No 1 EoP CVE-2026-96103 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96172 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96174 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96175 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-94507 DirectX Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure Vulnerability Important 5.5 No No N/A Info CVE-2026-96084 Graphic Fonts Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-88211 Graphic Fonts Information Disclosure Vulnerability Important 5.7 No No 2 Info CVE-2026-100204 HEIF Image Extensions Remote Code Execution Vulnerability Important 7 No No 2 RCE CVE-2026-114164 HEVC Video Extensions Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-114165 HEVC Video Extensions Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-114167 HEVC Video Extensions Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-122173 HID Parser Library Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP CVE-2026-125135 HID Parser Library Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP CVE-2026-96010 HID Parser Library Elevation of Privilege Vulnerability Important 8.8 No No 3 EoP CVE-2026-96974 HID Parser Library Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP CVE-2026-96979 HID Parser Library Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP CVE-2026-96982 HID Parser Library Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP CVE-2026-96059 HID class driver Information Disclosure Vulnerability Important 5.5 No No 3 Info CVE-2026-119942 HTTP.sys Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-119946 HTTP.sys Information Disclosure Vulnerability Important 5.9 No No 2 Info CVE-2026-70003 JDBC Driver for SQL Server Security Feature Bypass Vulnerability Important 8.7 No No 2 SFB CVE-2026-119937 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP CVE-2026-105537 Mailslot File System Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-109485 Microsoft 365 Agents SDK Information Disclosure Vulnerability Important 6.3 No No 2 Info CVE-2026-112974 Microsoft Account Tampering Vulnerability Important 5.5 No No 2 Tampering CVE-2026-112982 Microsoft Account Tampering Vulnerability Important 5.5 No No 2 Tampering CVE-2026-96158 Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-108470 Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability Important No No 2 Info CVE-2026-108469 Microsoft Authentication Library for JavaScript Spoofing Vulnerability Important 6.8 No No 2 Spoofing CVE-2026-118288 Microsoft Azure File Sync Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-70120 Microsoft Bluetooth Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-85929 Microsoft Brokering File System Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96054 Microsoft Color Management Remote Code Execution Vulnerability Important 7 No No 2 RCE CVE-2026-96067 Microsoft Color Management Remote Code Execution Vulnerability Important 9.8 No No 2 RCE CVE-2026-96078 Microsoft Color Management Remote Code Execution Vulnerability Important 9.8 No No 2 RCE CVE-2026-119991 Microsoft Configuration Manager Information Disclosure Vulnerability Important 5.9 No No 2 Info CVE-2026-95882 Microsoft DirectMusic Remote Code Execution Vulnerability Important 9.8 No No 2 RCE CVE-2026-95891 Microsoft DirectMusic Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-95896 Microsoft DirectMusic Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-95901 Microsoft DirectMusic Remote Code Execution Vulnerability Important 9.8 No No 2 RCE CVE-2026-122196 Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-109460 Microsoft Entra Private Network Connector Information Disclosure Vulnerability Important 5.5 No No N/A Info CVE-2026-118153 Microsoft Exchange Server Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-118150 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118151 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 7.2 No No 2 EoP CVE-2026-118154 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118157 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 7.2 No No 2 EoP CVE-2026-118149 Microsoft Exchange Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE CVE-2026-118152 Microsoft Exchange Server Spoofing Vulnerability Important 6.5 No No 2 Spoofing CVE-2026-118208 Microsoft Exchange Server Spoofing Vulnerability Important 7.1 No No 2 Spoofing CVE-2026-114162 Microsoft Graph Elevation of Privilege Vulnerability Important 9.1 No No 2 EoP CVE-2026-112754 Microsoft Graphics Component Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-122987 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability Important 5.9 No No 2 EoP CVE-2026-105505 Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105578 Microsoft JScript Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-109492 Microsoft MCP Gateway Elevation of Privilege Vulnerability Important No No N/A EoP CVE-2026-108411 Microsoft ODBC Driver Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-109493 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-109498 Microsoft Office Access Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-110058 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-110059 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-110060 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111301 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111305 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118715 Microsoft Office Excel Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118725 Microsoft Office Excel Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-111292 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-118300 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-118727 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-118728 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-119999 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-123395 Microsoft Office Excel Information Disclosure Vulnerability Important 5.9 No No 2 Info CVE-2026-124178 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-124179 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-124183 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-116927 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118293 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118294 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118295 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118298 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118299 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118301 Microsoft Office Excel Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-118302 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118700 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118703 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118704 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118705 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118706 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118707 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118708 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118709 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118710 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118712 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118714 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118716 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118717 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118718 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118719 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118720 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118721 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118722 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118723 Microsoft Office Excel Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-118724 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118726 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118729 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118731 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118732 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-119986 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-120785 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 3 RCE CVE-2026-120790 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-120791 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-123385 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-124174 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-124176 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-124187 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-124229 Microsoft Office Excel Remote Code Execution Vulnerability Important 6.6 No No 2 RCE CVE-2026-111291 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-111293 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-112731 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-119993 Microsoft Office Outlook Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-119995 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-119996 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-119997 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-123375 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-123376 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-123377 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-123378 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-123379 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-123380 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-123381 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-123382 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-123383 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-123384 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-124227 Microsoft Office Outlook Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-124228 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112738 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-116922 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-112734 Microsoft Office PowerPoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112737 Microsoft Office PowerPoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-120001 Microsoft Office PowerPoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111286 Microsoft Office Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-116717 Microsoft Office Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-122198 Microsoft Office Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-119998 Microsoft Office Security Feature Bypass Vulnerability Important 6.5 No No 2 SFB CVE-2026-109466 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-109495 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP CVE-2026-109502 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-111296 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-123391 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No 3 EoP CVE-2026-80095 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 9 No No 2 EoP CVE-2026-88176 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-109455 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-110057 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-124210 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-109464 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-109472 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-109499 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-110044 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-120000 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-123390 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No N/A RCE CVE-2026-109454 Microsoft Office SharePoint Spoofing Vulnerability Important 9 No No 2 Spoofing CVE-2026-109456 Microsoft Office SharePoint Spoofing Vulnerability Important 4.6 No No 2 Spoofing CVE-2026-109497 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing CVE-2026-109504 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing CVE-2026-110045 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing CVE-2026-110065 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing CVE-2026-111297 Microsoft Office SharePoint Spoofing Vulnerability Important 8 No No 2 Spoofing CVE-2026-111300 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing CVE-2026-111303 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No 2 Spoofing CVE-2026-112736 Microsoft Office SharePoint Spoofing Vulnerability Important 5.3 No No 2 Spoofing CVE-2026-109494 Microsoft Office Visio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-109496 Microsoft Office Visio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-110046 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-110051 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-110066 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-111288 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-112720 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-116721 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-124233 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-109491 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-109500 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-109501 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-109503 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-109505 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-110050 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-110052 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-110053 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-110054 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-110056 Microsoft Office Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-110061 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-110062 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-110064 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111287 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-111290 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111294 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111295 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111298 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111299 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111302 Microsoft Office Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-111304 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111306 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111307 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111308 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-111310 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112714 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112715 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112716 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112717 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112718 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112719 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112721 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112722 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112723 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112724 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112726 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112728 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112729 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112730 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112733 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112735 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112739 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112741 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-116718 Microsoft Office Word Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-116719 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-116720 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-116722 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-116923 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-116925 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-123394 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-109487 Microsoft PowerPoint Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-122985 Microsoft PowerShell Information Disclosure Vulnerability Important 6.1 No No 2 Info CVE-2026-113815 Microsoft PowerShell Security Feature Bypass Vulnerability Important 4.7 No No 2 SFB CVE-2026-124226 Microsoft PowerShell Security Feature Bypass Vulnerability Important 8.8 No No 2 SFB CVE-2026-105512 Microsoft QUIC Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-88236 Microsoft QUIC Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-114166 Microsoft Raw Image Extension Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-105492 Microsoft Remote Registry Service Denial of Service Vulnerability Important 5.3 No No 2 DoS CVE-2026-116929 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-116934 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-116944 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.2 No No 2 EoP CVE-2026-118105 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118108 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-118109 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118110 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118111 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-118112 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-118113 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-118114 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-118115 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-118116 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-118117 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-118118 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-118119 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-118120 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-66813 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.1 No No 2 EoP CVE-2026-67375 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-67387 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-84010 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-94513 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8 No No 3 EoP CVE-2026-116932 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-116935 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-116939 Microsoft SQL Server Information Disclosure Vulnerability Important 5.7 No No 2 Info CVE-2026-116940 Microsoft SQL Server Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-116943 Microsoft SQL Server Information Disclosure Vulnerability Important 7.5 No No 2 Info CVE-2026-118102 Microsoft SQL Server Information Disclosure Vulnerability Important 5.9 No No 2 Info CVE-2026-118103 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-118104 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-67382 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-68783 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-116930 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-116931 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-116933 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.2 No No 2 RCE CVE-2026-116936 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.2 No No 2 RCE CVE-2026-116937 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-116938 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-116941 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-116942 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-116945 Microsoft SQL Server Remote Code Execution Vulnerability Important 9.8 No No 2 RCE CVE-2026-116946 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-116947 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-118106 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.1 No No 2 RCE CVE-2026-67372 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-67374 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-67391 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE CVE-2026-67632 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE CVE-2026-67637 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE CVE-2026-67646 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE CVE-2026-120002 Microsoft SharePoint Server Elevation of Privilege Vulnerability Important 9.9 No No 2 EoP CVE-2026-116926 Microsoft Teams Spoofing Vulnerability Important 7.5 No No 2 Spoofing CVE-2026-122979 Microsoft Teams for Android Spoofing Vulnerability Important 8.1 No No N/A Spoofing CVE-2026-69901 Microsoft Teams for Android Spoofing Vulnerability Important 7.5 No No N/A Spoofing CVE-2026-121681 Microsoft Trace Data Helper Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-122172 Microsoft Trace Data Helper Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-116698 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-116699 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 6.5 No No 3 RCE CVE-2026-85838 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-85839 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-88222 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-119987 Microsoft Windows App Store Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96150 Microsoft Windows Codecs Library Information Disclosure Vulnerability Important 5.6 No No 2 Info CVE-2026-122168 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96157 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 9.8 No No 2 RCE CVE-2026-105586 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-113821 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability Important 4.1 No No 3 Info CVE-2026-119943 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119954 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119904 Microsoft Windows Speech Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-97002 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-110048 Microsoft Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-110049 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-110055 Microsoft Word Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-113759 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-119881 Microsoft XPS Document Converter Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-119880 Microsoft XPS Document Converter Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-122171 Microsoft XPS Document Converter Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-66801 Microsoft Xbox Remote Code Execution Vulnerability Important No No 2 RCE CVE-2026-62903 Microsoft.Data.SqlClient Information Disclosure Vulnerability Important No No 2 Info CVE-2026-124224 PowerShell Elevation of Privilege Vulnerability Important 7 No No 3 EoP CVE-2026-121669 PowerShell Information Disclosure Vulnerability Important 6.1 No No 2 Info CVE-2026-121674 PowerShell Information Disclosure Vulnerability Important 6.1 No No 2 Info CVE-2026-121675 PowerShell Information Disclosure Vulnerability Important 6.1 No No 2 Info CVE-2026-119387 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119388 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-123389 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability Important 7 No No 3 EoP CVE-2026-83894 RPC Runtime Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-116697 Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability Important 5.9 No No 2 DoS CVE-2026-119853 Remote Access API Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-119390 Remote Desktop Client Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-119858 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-119934 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-95964 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No 3 RCE CVE-2026-119824 Remote Desktop Client Tampering Vulnerability Important 8.8 No No 2 Tampering CVE-2026-80094 Remote Desktop Gateway Service Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-108401 Remote Desktop Services Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-119972 Remote Procedure Call Denial of Service Vulnerability Important 5.9 No No 2 DoS CVE-2026-96017 Role: DNS Server Denial of Service Vulnerability Important 4.9 No No 3 DoS CVE-2026-96975 Role: DNS Server Denial of Service Vulnerability Important 5.9 No No 2 DoS CVE-2026-88111 SQL Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-94511 SQL Server Remote Code Execution Vulnerability Important 8.8 No No 3 RCE CVE-2026-96989 Secondary Logon Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-118140 Server for NFS Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-88235 Servicing Stack Updates Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-113748 Software Protection Platform (SPP) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119395 Storport.sys Driver Information Disclosure Vulnerability Important 4 No No 2 Info CVE-2026-119849 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability Important 7 No No 2 RCE CVE-2026-119981 Visual Studio Code Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119976 Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-102230 Visual Studio Code Information Disclosure Vulnerability Important 7.4 No No 2 Info CVE-2026-119975 Visual Studio Code Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-119985 Visual Studio Code Remote Code Execution Vulnerability Important 8.3 No No 2 RCE CVE-2026-120779 Visual Studio Code Remote Code Execution Vulnerability Important 9.6 No No 2 RCE CVE-2026-120780 Visual Studio Code Remote Code Execution Vulnerability Important 8.3 No No 2 RCE CVE-2026-121662 Visual Studio Code Remote Code Execution Vulnerability Important 8.6 No No 1 RCE CVE-2026-121664 Visual Studio Code Remote Code Execution Vulnerability Important 8.3 No No 2 RCE CVE-2026-70094 Visual Studio Code Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-102236 Visual Studio Code Security Feature Bypass Vulnerability Important 8.6 No No 2 SFB CVE-2026-114171 Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No 2 SFB CVE-2026-119982 Visual Studio Code Security Feature Bypass Vulnerability Important 6.5 No No 2 SFB CVE-2026-119983 Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No 2 SFB CVE-2026-120782 Visual Studio Code Security Feature Bypass Vulnerability Important 7.8 No No 2 SFB CVE-2026-121660 Visual Studio Code Security Feature Bypass Vulnerability Important 7.5 No No 2 SFB CVE-2026-121661 Visual Studio Code Security Feature Bypass Vulnerability Important 7.8 No No 2 SFB CVE-2026-121663 Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No 1 SFB CVE-2026-121665 Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No 2 SFB CVE-2026-114151 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-114152 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-114158 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-114159 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-118745 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-105017 Volume Shadow Copy Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119941 Volume Shadow Copy Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119825 Win32k Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-119856 Win32k Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-119910 Win32k Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-95893 Win32k Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-112727 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-96002 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-96020 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-96064 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-96092 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.1 No No 3 RCE CVE-2026-96177 Windows Domain Name Service Remote Code Execution Vulnerability Important 8.1 No No 2 RCE CVE-2026-95884 Windows Active Directory Certificate Services Information Disclosure Vulnerability Important 5.3 No No 2 Info CVE-2026-105590 Windows Active Directory Certificate Services Security Feature Bypass Important 5.3 No No 2 SFB CVE-2026-105559 Windows Active Directory Denial of Service Vulnerability Important 6.5 No No 2 DoS CVE-2026-105568 Windows Active Directory Domain Services Denial of Service Vulnerability Important 6.5 No No 2 DoS CVE-2026-119948 Windows Active Directory Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-122988 Windows Admin Center Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-105020 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105021 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105022 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105023 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105025 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105026 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105490 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105491 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105493 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105495 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105496 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105497 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105498 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105499 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118215 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-118216 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118217 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118218 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118219 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118221 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118222 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-118223 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-118224 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-118225 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118226 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118227 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118228 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118229 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118232 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118277 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118278 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118279 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118280 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-118283 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-94515 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95960 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-118214 Windows Advanced Rasterization Platform Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-88242 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No 1 EoP CVE-2026-95944 Windows App Readiness Service Tampering Vulnerability Important 5.5 No No 2 Tampering CVE-2026-96018 Windows AppContainer Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-116714 Windows AppX Deployment Service Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-88224 Windows AppX Deployment Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96074 Windows AppX Package Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105541 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119888 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119893 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119894 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119895 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-121671 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96038 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96155 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-122175 Windows Autopilot Elevation of Privilege Vulnerability Important 7 No No 1 EoP CVE-2026-105554 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119405 Windows Backup Engine Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-70182 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP CVE-2026-88239 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95877 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96127 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119832 Windows BitLocker Security Feature Bypass Vulnerability Important 5.9 No No 2 SFB CVE-2026-97015 Windows BitLocker Security Feature Bypass Vulnerability Important 6.8 No No 2 SFB CVE-2026-88187 Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-95996 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-88213 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96001 Windows Bluetooth Service Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-112761 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-113762 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119401 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119402 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119403 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-88221 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-94529 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95871 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96156 Windows Broker Infrastructure Service Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-88245 Windows Brokering File System Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95979 Windows Brokering File System Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96097 Windows Brokering File System Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-108405 Windows CD-ROM Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-108404 Windows CD-ROM Driver Remote Code Execution Vulnerability Important 6.8 No No 2 RCE CVE-2026-103571 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-105533 Windows COM Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112968 Windows COM Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-94531 Windows COM Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-113767 Windows COM+ Event System Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-113769 Windows COM+ Event System Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119855 Windows COM+ Event System Service Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-85942 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-88232 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-88238 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-118138 Windows Client for NFS Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-122165 Windows Client for NFS Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95885 Windows Client for NFS Elevation of Privilege Vulnerability Important 8.1 No No 2 EoP CVE-2026-118141 Windows Client for NFS Remote Code Execution Vulnerability Important 8.8 No No 3 RCE CVE-2026-88249 Windows Client for NFS Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-119404 Windows Client for NFS Security Feature Bypass Vulnerability Important 5.9 No No 2 SFB CVE-2026-96162 Windows Clipboard Virtual Channel Extension Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105569 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-112763 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No 3 EoP CVE-2026-112810 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119974 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112803 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-112809 Windows Composite Image File System Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-96072 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96088 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96101 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-96042 Windows Connection Manager Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96043 Windows Connection Manager Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112753 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-113761 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-113771 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 5.5 No No 2 EoP CVE-2026-105562 Windows Container Manager Service Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-119393 Windows Credential Manager Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP CVE-2026-96978 Windows Credential User Interface Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-118739 Windows DHCP Client Denial of Service Vulnerability Important 6.5 No No 2 DoS CVE-2026-113863 Windows DHCP Client Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-88240 Windows DHCP Client Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-96115 Windows DHCP Client Elevation of Privilege Vulnerability Important 8 No No 2 EoP CVE-2026-119890 Windows DHCP Server Denial of Service Vulnerability Important 5.3 No No 2 DoS CVE-2026-96134 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-105588 Windows DHCP Server Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP CVE-2026-105557 Windows DHCP Server Information Disclosure Vulnerability Important 5.9 No No 2 Info CVE-2026-105560 Windows DHCP Server Remote Code Execution Vulnerability Important 7.2 No No 2 RCE CVE-2026-72998 Windows DHCP Server Remote Code Execution Vulnerability Important 8.1 No No 2 RCE CVE-2026-88216 Windows DHCP Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-88243 Windows DHCP Server Remote Code Execution Vulnerability Important 9.8 No No 2 RCE CVE-2026-113773 Windows DHCP Server Spoofing Vulnerability Important 5.3 No No 2 Spoofing CVE-2026-96076 Windows DIAL Client Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96176 Windows DNS Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-96983 Windows DNS Denial of Service Vulnerability Important 5.3 No No 3 DoS CVE-2026-105520 Windows DNS Elevation of Privilege Vulnerability Important 7.2 No No 2 EoP CVE-2026-119953 Windows DNS Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96179 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No 2 EoP CVE-2026-105579 Windows DNS Information Disclosure Vulnerability Important 7.5 No No 2 Info CVE-2026-108425 Windows DNS Information Disclosure Vulnerability Important 5.9 No No 2 Info CVE-2026-119970 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-96970 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-96976 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-96980 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-96984 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-96985 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-96986 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-96987 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-96988 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-97006 Windows DNS Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-109463 Windows DNS Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-113855 Windows DNS Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-88218 Windows DNS Remote Code Execution Vulnerability Important 9.8 No No 2 RCE CVE-2026-119971 Windows DNS Server Information Disclosure Vulnerability Important 4.9 No No 2 Info CVE-2026-96112 Windows DNS Server Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-96972 Windows DNS Server Information Disclosure Vulnerability Important 7.5 No No 2 Info CVE-2026-81384 Windows DNS Server Remote Code Execution Vulnerability Important 8.1 No No 2 RCE CVE-2026-119905 Windows DNS Spoofing Vulnerability Important 4.9 No No 2 Spoofing CVE-2026-113763 Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability Important 6.3 No No 3 EoP CVE-2026-105575 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105582 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-105583 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112986 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112758 Windows Defender Firewall Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-112977 Windows Deployment Services Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-113818 Windows Deployment Services Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-118213 Windows Deployment Services Information Disclosure Vulnerability Important 5.9 No No 2 Info CVE-2026-105558 Windows Deployment Services Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-112988 Windows Desktop Window Manager Elevation of Privilege Vulnerability Important 5.5 No No 2 EoP CVE-2026-113758 Windows Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-112743 Windows Device Association Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119844 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119866 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119874 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-113750 Windows Device Inventory Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-113817 Windows Devices Human Interface Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP CVE-2026-112800 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95934 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95976 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-118142 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119917 Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119919 Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-105527 Windows Encrypting File System (EFS) Denial of Service Vulnerability Important 5.5 No No 2 DoS CVE-2026-96973 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119394 Windows Enhanced Storage Remote Code Execution Vulnerability Important 6.6 No No 2 RCE CVE-2026-105540 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-85862 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No 3 EoP CVE-2026-94525 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95947 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96153 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112793 Windows Event Collector Service Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-112796 Windows Event Collector Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95997 Windows Event Logging Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95977 Windows Event Viewer Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-118137 Windows FTP Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119869 Windows Failover Cluster Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP CVE-2026-113751 Windows Fast FAT Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96075 Windows Feedback Hub Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-108415 Windows File Server Resource Management Service Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP CVE-2026-108416 Windows File Server Resource Management Service Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP CVE-2026-108421 Windows File Server Resource Management Service Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-113765 Windows File Server Resource Management Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-113754 Windows FileCrypt Driver Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-113757 Windows FileCrypt Driver Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-113756 Windows FileCrypt Driver Security Feature Bypass Vulnerability Important 5.3 No No 2 SFB CVE-2026-113755 Windows Filter Manager Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-121673 Windows Filter Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105553 Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112756 Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-88215 Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP CVE-2026-119907 Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-108407 Windows GDI Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-94527 Windows GDI Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-108424 Windows GDI Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-94519 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95879 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95888 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95895 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95906 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95909 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95922 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95932 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95935 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-95938 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95942 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95948 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95950 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95953 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95966 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95971 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95973 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95974 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95983 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-95991 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96122 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96124 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96126 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-96160 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96168 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96171 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119841 Windows Graphics Kernel Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-88217 Windows Graphics Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-95946 Windows Graphics Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-96048 Windows Graphics Kernel Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-96133 Windows Graphics Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-96137 Windows Graphics Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-96144 Windows Graphics Kernel Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-119992 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7 No No 1 EoP CVE-2026-95923 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119385 Windows Hyper-V Denial of Service Vulnerability Important 4.7 No No 2 DoS CVE-2026-119955 Windows Hyper-V Denial of Service Vulnerability Important 6 No No 2 DoS CVE-2026-95913 Windows Hyper-V Denial of Service Vulnerability Important 5.9 No No 2 DoS CVE-2026-96965 Windows Hyper-V Denial of Service Vulnerability Important 5.3 No No 2 DoS CVE-2026-119391 Windows Hyper-V Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119826 Windows Hyper-V Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95910 Windows Hyper-V Security Feature Bypass Vulnerability Important 6.7 No No 2 SFB CVE-2026-119959 Windows Hyper-V Spoofing Vulnerability Important 5.3 No No 2 Spoofing CVE-2026-122169 Windows IKE Extension Spoofing Vulnerability Important 7.5 No No 2 Spoofing CVE-2026-119871 Windows IP Translation Configuration Service Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP CVE-2026-122163 Windows Image Acquisition Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-96164 Windows Imaging Component Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-119862 Windows Input System Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-119916 Windows Input System Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105501 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-105507 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105532 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105543 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105545 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-113847 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119398 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 1 EoP CVE-2026-119399 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119831 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119852 Windows Installer Elevation of Privilege Vulnerability Important 6.7 No No 2 EoP CVE-2026-119865 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119892 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-119903 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-119929 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95951 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96004 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96008 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96019 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96026 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96027 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96028 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96029 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96035 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96036 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96046 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96047 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96060 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96061 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96062 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96073 Windows Installer Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96085 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96152 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-112789 Windows Installer Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-119838 Windows Installer Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-119887 Windows Installer Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-119867 Windows Installer Security Feature Bypass Vulnerability Important 5.3 No No 2 SFB CVE-2026-96093 Windows Internet (wininet.dll) Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-118124 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119859 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119860 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119861 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-122179 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119909 Windows Internet Information Services Denial of Service Vulnerability Important 5.9 No No 2 DoS CVE-2026-119936 Windows Internet Information Services Denial of Service Vulnerability Important 5.9 No No 2 DoS CVE-2026-105584 Windows Inventory Backup Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-112985 Windows JScript Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-119940 Windows Kerberos Denial of Service Vulnerability Important 6.5 No No 3 DoS CVE-2026-70240 Windows Kerberos Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-96082 Windows Kerberos Denial of Service Vulnerability Important 6.5 No No 2 DoS CVE-2026-119847 Windows Kerberos Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-122164 Windows Kerberos Elevation of Privilege Vulnerability Important 8 No No 3 EoP CVE-2026-85844 Windows Kerberos Elevation of Privilege Vulnerability Important 9.8 No No 2 EoP CVE-2026-105504 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-105513 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-105566 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-108403 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-109473 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-112790 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 3 EoP CVE-2026-112802 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-112805 Windows Kernel Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-112969 Windows Kernel Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP CVE-2026-114170 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-118143 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP CVE-2026-119868 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119884 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP CVE-2026-119912 Windows Kernel Elevation of Privilege Vulnerability Important 6.7 No No 2 EoP CVE-2026-119918 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP CVE-2026-119935 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP CVE-2026-119965 Windows Kernel Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP CVE-2026-122183 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-94514 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 1 EoP CVE-2026-95905 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP CVE-2026-95988 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-96031 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96052 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP CVE-2026-96129 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP CVE-2026-105552 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-119857 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-96058 Windows Kernel Information Disclosure Vulnerability Important 4.6 No No 2 Info CVE-2026-112973 Windows Kernel Security Feature Bypass Vulnerability Important 7.1 No No 2 SFB CVE-2026-119397 Windows Kernel Transaction Manager Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-94522 Windows Kernel Transaction Manager Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-122297 Windows Kernel Transaction Manager Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-94517 Windows Kernel Transaction Manager Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-96139 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-88230 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-96117 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-113766 Windows Language Experience Service Tampering Vulnerability Important 3.3 No No 2 Tampering CVE-2026-108402 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability Important 5.3 No No 3 DoS CVE-2026-116707 Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-116706 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-88244 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Important 7.5 No No 3 RCE CVE-2026-112975 Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability Important 5.3 No No 2 DoS CVE-2026-113816 Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability Important 4.1 No No 3 EoP CVE-2026-112807 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Important 6.5 No No 2 DoS CVE-2026-70231 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-85801 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-88227 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-88228 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96016 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96066 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95876 Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-105565 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No 2 EoP CVE-2026-105574 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No 2 EoP CVE-2026-119901 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 6.4 No No 2 EoP CVE-2026-105503 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105524 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-105546 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112814 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 5.5 No No 2 EoP CVE-2026-95920 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-108410 Windows Management Instrumentation Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-112965 Windows Management Instrumentation Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-105580 Windows Management Instrumentation Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-119836 Windows Management Services Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-122182 Windows Maps Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-88229 Windows Media Player Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-105515 Windows Message Queuing Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-119848 Windows Message Queuing Denial of Service Vulnerability Important 5.3 No No 2 DoS CVE-2026-118125 Windows Message Queuing Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-118126 Windows Message Queuing Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119833 Windows Message Queuing Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119816 Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP CVE-2026-119921 Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119944 Windows Mobile Device Management Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-112987 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-113820 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96184 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-102219 Windows Modern Device Management (MDM) Remote Code Execution Vulnerability Important 8.1 No No 2 RCE CVE-2026-119945 Windows Modern Device Management (MDM) Remote Code Execution Vulnerability Important 8.1 No No 2 RCE CVE-2026-118220 Windows Multiple Provider Router Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-100223 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119900 Windows NTFS Elevation of Privilege Vulnerability Important 7.3 No No 2 EoP CVE-2026-119933 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-105542 Windows NTFS Remote Code Execution Vulnerability Important 8.8 No No 3 RCE CVE-2026-113848 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No 3 RCE CVE-2026-102200 Windows NTFS Tampering Vulnerability Important 4.7 No No 2 Tampering CVE-2026-113844 Windows NTFS Tampering Vulnerability Important 5.5 No No 2 Tampering CVE-2026-121680 Windows NTLM Spoofing Vulnerability Important 7.5 No No 2 Spoofing CVE-2026-105551 Windows NetBIOS Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-112798 Windows NetBIOS Elevation of Privilege Vulnerability Important 7 No No 1 EoP CVE-2026-119873 Windows NetBIOS Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96971 Windows NetBIOS Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-88212 Windows Network Address Translation (NAT) Remote Code Execution Vulnerability Important 7.5 No No 3 RCE CVE-2026-105525 Windows Network Connection Broker Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-108406 Windows Network Connection Broker Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119821 Windows Network Connection Broker Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-118736 Windows Network File System Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-105587 Windows OLE DB Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95933 Windows OLE Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96110 Windows OLE Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-112760 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-112813 Windows Overlay Filter Elevation of Privilege Vulnerability Important 4.7 No No 2 EoP CVE-2026-119822 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-121670 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-108409 Windows Overlay Filter Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-112750 Windows Overlay Filter Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-96981 Windows PCI Bus Driver Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP CVE-2026-96992 Windows PCI Bus Driver Elevation of Privilege Vulnerability Important 6.4 No No 3 EoP CVE-2026-105018 Windows Partition Management Driver Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP CVE-2026-88220 Windows Performance Counters Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-113768 Windows Performance Counters Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-95975 Windows Performance Counters Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-96993 Windows Performance Monitor Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-96107 Windows Phone Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-105511 Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-118123 Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-124225 Windows PowerShell Remote Code Execution Vulnerability Important 7.8 No No 2 RCE CVE-2026-105567 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112752 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-112762 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-112765 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112791 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 1 EoP CVE-2026-112792 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112797 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112811 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-112976 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112978 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-112980 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 6.7 No No 2 EoP CVE-2026-112981 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-113770 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119913 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119939 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119950 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-105531 Windows Print Spooler Components Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-112806 Windows Print Spooler Components Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-112808 Windows Print Spooler Components Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-119898 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119928 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-123388 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-88247 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-112799 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-108414 Windows Projected File System Filter Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-113764 Windows Projected File System Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-96023 Windows Push Notification Core Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95881 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-112755 Windows RNDIS Elevation of Privilege Vulnerability Important 6.8 No No 3 EoP CVE-2026-113772 Windows Redirected Drive Buffering Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-108412 Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119396 Windows Remote Access API Tampering Vulnerability Important 6.5 No No 2 Tampering CVE-2026-113843 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-112751 Windows Remote Assistance Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119839 Windows Remote Desktop Client Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-108417 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No 3 Info CVE-2026-108418 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-108419 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-121677 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No 2 Info CVE-2026-121678 Windows Remote Desktop Client Information Disclosure Vulnerability Important 5.3 No No 3 Info CVE-2026-95908 Windows Remote Desktop Client Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-119932 Windows Remote Desktop Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-122166 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119882 Windows Remote Desktop Services Information Disclosure Vulnerability Important 5.3 No No 2 Info CVE-2026-69327 Windows Remote Desktop Services Remote Code Execution Vulnerability Important 7.4 No No 2 RCE CVE-2026-69565 Windows Remote Desktop Services Remote Code Execution Vulnerability Important 7 No No 2 RCE CVE-2026-105509 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7 No No 3 EoP CVE-2026-119386 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7 No No 3 EoP CVE-2026-96081 Windows Rich Text Edit Control Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-112812 Windows SMB Client Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112970 Windows SMB Client Elevation of Privilege Vulnerability Important 7 No No 1 EoP CVE-2026-112971 Windows SMB Client Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119870 Windows SMB Client Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119988 Windows SMB Remote Code Execution Vulnerability Important 7.1 No No 2 RCE CVE-2026-122176 Windows SMB Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-112972 Windows SMBv3 Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-119906 Windows Sandbox Elevation of Privilege Vulnerability Important No No 2 EoP CVE-2026-112757 Windows Secure Kernel Mode Information Disclosure Vulnerability Important 6 No No 2 Info CVE-2026-105561 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-105510 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112795 Windows Security Account Manager Denial of Service Vulnerability Important 6.5 No No 2 DoS CVE-2026-112966 Windows Security Account Manager Denial of Service Vulnerability Important 7.5 No No 2 DoS CVE-2026-122474 Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability Important 5.9 No No 2 SFB CVE-2026-113842 Windows Security Center Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-88241 Windows Sensor Data Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-112989 Windows Servicing Stack Updates Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-105547 Windows Setup and Deployment Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119914 Windows Setup and Deployment Elevation of Privilege Vulnerability Important 6.7 No No 2 EoP CVE-2026-119817 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-97013 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-102868 Windows Shell Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-105506 Windows Shell Information Disclosure Vulnerability Important 5 No No 2 Info CVE-2026-119938 Windows Shell Remote Code Execution Vulnerability Important 7.5 No No 2 RCE CVE-2026-85907 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Important 4.4 No No 2 EoP CVE-2026-112794 Windows Smart Card Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-118144 Windows Smart Card Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP CVE-2026-119383 Windows Smart Card Elevation of Privilege Vulnerability Important 6.6 No No 3 EoP CVE-2026-119835 Windows Smart Card Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95968 Windows Smart Card Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-105549 Windows Smart Card Information Disclosure Vulnerability Important 4.3 No No 3 Info CVE-2026-112979 Windows State Repository Service Tampering Vulnerability Important 5.5 No No 2 Tampering CVE-2026-95998 Windows StateRepository API Tampering Vulnerability Important 4.4 No No 2 Tampering CVE-2026-105529 Windows Storage Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119389 Windows Storage Elevation of Privilege Vulnerability Important 7 No No 1 EoP CVE-2026-95889 Windows Storage Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP CVE-2026-105534 Windows Storage Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-105024 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119392 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-119851 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-113814 Windows Storage Spaces Controller Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-119908 Windows Storage Spaces Controller Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-122475 Windows Storage Spaces Controller Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-119830 Windows Storport Miniport Driver Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP CVE-2026-119885 Windows Storport Miniport Driver Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP CVE-2026-119875 Windows Storport Miniport Driver Information Disclosure Vulnerability Important 4 No No 2 Info CVE-2026-119823 Windows Storport Miniport Driver Remote Code Execution Vulnerability Important 6.8 No No 2 RCE CVE-2026-119834 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119846 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP CVE-2026-88237 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-105530 Windows System Events Broker Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-96077 Windows TCP/IP Denial of Service Vulnerability Important 7.5 No No 1 DoS CVE-2026-96102 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96969 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112759 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7 No No 1 EoP CVE-2026-122174 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-88233 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95894 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96053 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96845 Windows Task Scheduler Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-108413 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-116700 Windows Telephony Service Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP CVE-2026-119886 Windows Telephony Service Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-108408 Windows Telephony Service Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-119818 Windows Text Services Framework Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-119925 Windows Text Services Framework Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-119931 Windows Text Services Framework Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96022 Windows Text Services Framework Information Disclosure Vulnerability Important 5.6 No No 2 Info CVE-2026-119829 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP CVE-2026-112764 Windows USB Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119872 Windows USB Driver Elevation of Privilege Vulnerability Important 6.4 No No 2 EoP CVE-2026-122167 Windows USB Driver Elevation of Privilege Vulnerability Important 6.8 No No 2 EoP CVE-2026-95872 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96005 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96051 Windows USB Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96055 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96056 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-96057 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95902 Windows USB Hub Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95999 Windows USB Hub Driver Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP CVE-2026-96041 Windows USB Hub Driver Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-119876 Windows USB Scanner Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-112984 Windows USB Video Driver Elevation of Privilege Vulnerability Important 6.6 No No 2 EoP CVE-2026-112990 Windows USB Video Driver Elevation of Privilege Vulnerability Important 4.7 No No 3 EoP CVE-2026-95961 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95965 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-97000 Windows USM Communication Manager Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119837 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-119840 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 6.3 No No 2 EoP CVE-2026-122984 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-122162 Windows Update Stack Information Disclosure Vulnerability Important 5.5 No No 2 Info CVE-2026-95987 Windows User Manager Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96037 Windows User Manager Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95962 Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability Important 9 No No 2 RCE CVE-2026-96086 Windows WLAN Service Denial of Service Vulnerability Important 6.5 No No 2 DoS CVE-2026-105028 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-119827 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-119899 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-122170 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-108423 Windows WinHTTP Information Disclosure Vulnerability Important 4.7 No No 2 Info CVE-2026-105589 Windows Wireless Networking Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-113760 Windows XWizard Framework Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP CVE-2026-112801 Windows eSCL Scanner Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-95956 Windows eSCL Scanner Remote Code Execution Vulnerability Important 8.1 No No 2 RCE CVE-2026-112766 Windows exFAT File System Elevation of Privilege Vulnerability Important 7 No No 3 EoP CVE-2026-112804 Windows exFAT File System Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-122177 Windows iSCSI Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP CVE-2026-95898 Windows iSCSI Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP CVE-2026-88231 Windows iSCSI Information Disclosure Vulnerability Important 5.7 No No 2 Info CVE-2026-105518 Windows iSCSI Remote Code Execution Vulnerability Important 8.8 No No 2 RCE CVE-2026-88234 Windows iSCSI Remote Code Execution Vulnerability Important 9.8 No No 2 RCE CVE-2026-83684 Windows iSCSI Target Service Information Disclosure Vulnerability Important 7.5 No No 2 Info CVE-2026-105522 Winlogon Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-83563 Winlogon Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-105526 Winsock Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-96994 Winsock Elevation of Privilege Vulnerability Important 7 No No 2 EoP CVE-2026-95874 Xbox Gaming Services Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP CVE-2026-95989 vhdmp.sys Elevation of Privilege Vulnerability Important 7 No No 1 EoP * Indicates this CVE had been released by a third party and is now being included in Microsoft releases.** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user. As with last month, I’ll do my best to summarize everything else in this release but assume there are details I miss or that will be revised after the release. I’ve tried to group these into cohorts of their own.Local Privilege Escalations: As usual, EoP is the biggest category in the release. 425 of the EoP bugs require an attacker to already be on the box, and 245 of them hand over SYSTEM or administrator privileges. That’s what makes them the second half of nearly every attack chain. None are listed as public or under active attack, but 33 are rated “Exploitation More Likely”, which is where I’d start. The biggest cluster is the Windows Advanced Rasterization Platform, with 36 CVEs. Twenty-eight score CVSS 8.8 with a changed scope. For these cases, an attacker running a malicious app inside an AppContainer feeds crafted graphics data to an isolated compilation service and escapes the container. Hyper-V earns eight Critical-rated EoPs. Two of them score 8.2 with a changed scope, and the first one lets an attacker reach VTL1. Windows Remote Desktop Services (CVE-2026-119957), TPM (CVE-2026-119382), and Graphics Kernel (CVE-2026-119966) make up the rest of the local Criticals. If you run Hyper-V hosts, don’t skip these.The rest is the usual long tail: Graphics Kernel (28), Installer (32), Kernel (18), Print Spooler (14), and DWM (9), plus smaller clusters in the Audio Service, Broadcast DVR User Service, USB drivers, and LSASS. Individually, none of these will make headlines. Collectively, they’re a very large pile of ways to become SYSTEM. Rootkits, anyone?Office-Related Bugs: Similar to last month, Office takes a big share of the release, with Word at 65 CVEs and Excel at 64. The bulk is remote code execution: 154 of the 201 are RCEs, along with 25 information disclosure bugs, 10 EoPs, and 11 spoofing bugs. Twenty-two are rated Critical. Excel has 12 of those, Word has 4, Outlook has 3, the general Office component has 2, and PowerPoint has 1. The ones to look at first are those where the Preview Pane is an attack vector, since the user never has to open the file. Ten bugs fit this description.SharePoint Server adds 30 CVEs, and it’s a different mix from the rest of Office: 10 spoofing, 9 EoP, 7 RCE, and 3 info disclosure. The seven RCEs are mainly deserialization of untrusted data. The ones I checked need only an authenticated attacker with low-level access to send a crafted request, with no user interaction. CVE-2026-120002 is the highest score in the group at CVSS 9.9, an incorrect authorization EoP over the network. SharePoint has been a frequent target, so I wouldn’t wait for in-the-wild reports to patch.Exchange Server: Exchange Server gets 9 bugs this month: two RCEs, four EoPs, one denial of service, and two spoofing bugs. One is Critical, and none are publicly known or exploited. The Critical RCE (8.8) needs only a low-privileged login and no user interaction, and Microsoft rates it “Exploitation More Likely”, the only Exchange bug with that rating. It’s the one I’d patch first, along with the Windows Search bug covered earlier. The other RCE (also 8.8) is rated “Exploitation Unlikely”. The four EoPs score between 7.2 and 8.8, and the DoS lands at 7.5. The spoofing bugs may seem least worrying, but these often turn into credential relaying, so don’t discount them. As always with Exchange, keep in mind that it’s a favorite target, so patch these on a faster schedule than the scores suggest. And good luck Exchange Admins. I know you’ve had a rough few months. ∠(‘-‘ )SQL Server: SQL Server is the biggest single product in the release, with 59 bugs once you count the OLE DB and JDBC drivers. RCEs lead at 25, followed by 22 EoPs and 11 information disclosure bugs, with a few spoofing, bypass, DoS, and tampering bugs. All are Important, none are publicly known or exploited, and nearly all are rated “Exploitation Less Likely”.Heap buffer overflows dominate the root causes at 24, followed by 11 SQL injection flaws. The top score is a 9.8 RCE that doesn’t require authentication, where an attacker who controls a network endpoint used by an integration package returns a crafted response. Many of the 8.8 RCEs need only a low-privileged login, and several need no user interaction. Most of the others are in the 7 to 8.8 range. If you run SQL Server, plan on testing and deploying these, since the volume suggests a lot of attention on the product.Windows networking and remote access: Networking and remote access is a big group this month. EoP leads with 70 CVEs, followed by 48 RCEs, 30 information disclosure bugs, and 23 denial-of-service bugs. The one that surprised me is Kerberos. CVE-2026-85844 is an authentication bypass rated CVSS 9.8 that only gets an Important rating. According to the advisory, an unauthenticated attacker sends crafted Kerberos traffic and relays the resulting authentication to a domain controller, gaining SYSTEM on it with no user interaction. Don’t let the Important label fool you. DNS has 33 CVEs between the Windows DNS and DNS Server components, 10 of them RCEs. Fifteen are information disclosure bugs, and 13 of the DNS bugs score only 4.9. The DNS Server role alone has 11. Between DHCP Server (9 bugs, 4 of them RCE) and DNS, the infrastructure services most networks run on get a lot of attention.Some of the Critical bugs need a bit more than a network connection. The Windows TCP/IP RCE and the Function Discovery SSDP Provider RCE are both use-after-free bugs reached over an adjacent network, rated 7.5. The SMB Server bug in srvnet.sys also scores 7.5, but it needs a login and a won race condition. Race conditions get beaten at Pwn2Own all the time, so I wouldn’t count on that.The client side is worth a look too. Remote Desktop Client has 12 CVEs, including four RCEs, where an attacker hosts a malicious server and convinces a user to connect. The NFS client follows the same pattern, with two RCEs and four additional bugs. The Remote Desktop Services and Gateway components add 7 more, including one authenticated RCE.Azure, cloud and identity: Azure and identity bugs are a small slice of the release this month, with a mere 52 in total. Four are rated Critical: Azure OpenAI, Azure Managed Grafana, and two Active Directory Domain Services bugs. The scariest numbers belong to Azure OpenAI (9.8, missing authentication on a critical function) and two 9.9s in Microsoft Identity Manager and Azure DevOps. The Identity Manager bug is an EoP, and the DevOps one is an RCE. Cloud-service bugs often show up with big scores and nothing to deploy. Don’t assume that here. Microsoft’s data lists every one of these as “Customer Action Required: Yes”, so I’d verify each one before dismissing it. The Active Directory Domain Services pair is the one to watch for on-prem teams. One is an RCE at 8.8 and the other is a Critical EoP, and both are rated “Exploitation More Likely”.Windows graphics, media and printing: EoP bugs dominate this group, with 163 of the 213 bugs. Another 26 are information disclosure bugs and 24 are RCEs. Only six are rated Critical: Graphic Fonts and the Raw Image Extension (both 8.8 RCEs), a Codecs Library RCE, a Print Spooler RCE, and two Graphics Kernel EoPs.The biggest clusters are the Advanced Rasterization Platform (37), the Graphics Kernel (35), Print Spooler (20), and Desktop Window Manager (9), with the Win32K, audio, and Broadcast DVR components behind them. The scariest scores are in the media parsers, not graphics. DirectMusic, Media Foundation, and Color Management each have RCEs scoring 9.8. The 24 RCEs are spread across the Codecs Library, DirectMusic, Color Management, Media Foundation, and the XPS converter, among others. Most are on the wormable list, so look there before you triage them. The other piece worth noting is the Raw Image Extension, where a bug can fire just by viewing a folder with a malicious RAW file in it Windows storage file systems and drivers: EoP leads again here at about 80 bugs, followed by roughly 15 RCEs and 16 information disclosure bugs. Only one is rated Critical, an EoP in the TPM. Everything else lands at Important. The scariest scores are in the storage stack. iSCSI has a 9.8 RCE and is on the wormable list. The Storage Spaces Controller adds three more 8.8 RCEs. Windows Storage itself is the biggest component, and over half of its bugs are RCEs. The rest of the group is a long tail across NTFS, USB drivers, the Overlay Filter, Storport, the Cloud Files filter, and HID. About two dozen bugs need physical access, which is mostly the USB, HID, and BitLocker side of the group. Those are lower risk for most enterprises but matter for kiosks and shared machines. .NET and Visual Studio: Developer tooling is a mid-sized group this month with a paltry 44 bugs, and none of them break out of the Important rating. RCEs and security feature bypasses lead at 12 each, with denial of service (10), EoPs (6), and information disclosure (4) behind them. Visual Studio Code is the story again, with 19 bugs. Almost all of them need user interaction, typically opening something malicious. Microsoft rates two of the VS Code bugs, one RCE and one bypass, “Exploitation More Likely”, the only ones in this group with that rating. Remember that the editor sits on developer machines full of credentials and source, so I’d treat that as a priority.  The ASP.NET Core and .NET bugs are quieter. ASP.NET Core has 15 bugs, .NET has 12, split among DoS, EoP, bypass, and two RCEs. The rest are PowerShell, .NET Aspire, JScript, and a GitHub Copilot extension, in keeping with the year’s steady trickle of AI-adjacent tools.Windows Security and identity: This is a small group, and EoP carries it with about 30 of the roughly 50 bugs. The rest is a mix of denial of service (8), information disclosure (4), security feature bypass (3), and one spoofing bug. Only one is rated Critical: an RCE in Microsoft Defender (8.8). The standout is Kerberos. It’s covered in the networking section, but I’d put it near the top of the list overall because it lets an unauthenticated attacker become SYSTEM on a domain controller. The Defender RCE also needs a closer look. It requires user interaction, but it hits the product people count on to catch the attackers. The rest is the usual: credential handling, sign-in, and firewall bugs, plus a pair of Secure Kernel Mode issues.Microsoft Dynamics: Dynamics adds just one bug this month: an information disclosure in Dynamics 365 on-premises (6.5). It is not publicly known or exploited.What’s left is the Windows plumbing: Installer, Kernel, Shell, and a long list of single-bug services such as Task Scheduler, WMI, Performance Counters, Event Viewer, and Sandbox. EoP leads with 51 of the roughly 120, followed by 36 information disclosure bugs, 12 RCEs, and a few tampering, bypass, and spoofing bugs. None are Critical, and none are publicly known or exploited.No new advisories are being released this month.Looking AheadThe final Patch Tuesday of the year will be on December 8. Regardless of how big (or how small!) the release may be, I’ll be back to do my best to discern what you need to know. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

Read full story at Zero Day Initiative →