CRITICAL
CVE-2026-111497
Vulnerability
EXPLOITED UNSPECIFIED
Critical
CVE-2026-111497
Exploited in the wild
2d
Listed in CISA's Known Exploited Vulnerabilities catalog — attackers are already using it.
Vendor advisory not machine-readable — grade is from reported exploitation.
MSRC Security Blog
CRITICAL
CVE-2026-97229
Vulnerability
EXPLOITED UNSPECIFIED
Critical
CVE-2026-97229
Exploited in the wild
4d
Listed in CISA's Known Exploited Vulnerabilities catalog — attackers are already using it.
Vendor advisory not machine-readable — grade is from reported exploitation.
The Hacker News
CRITICAL
CVE-2026-111497
Vulnerability
EXPLOITED UNSPECIFIED
Critical
CVE-2026-111497
Exploited in the wild
5d
Listed in CISA's Known Exploited Vulnerabilities catalog — attackers are already using it.
Vendor advisory not machine-readable — grade is from reported exploitation.
The Hacker News
CRITICAL
CVE-2026-62765
Remote Code Execution
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-62765
6d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
CRITICAL
CVE-2026-105014
Remote Code Execution
Azure Pipelines
NO AUTH NETWORK
Critical
CVE-2026-105014
11d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Azure Pipelines
MSRC Security Blog
CRITICAL
CVE-2026-97785
Privilege Escalation
AAD App Proxy
NO AUTH NETWORK
Critical
CVE-2026-97785
11d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct AAD App Proxy
MSRC Security Blog
CRITICAL
CVE-2026-83938
Privilege Escalation
Azure Kubernetes Configuration Service
NO AUTH NETWORK
Critical
CVE-2026-83938
11d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Azure Kubernetes Configuration Service
MSRC Security Blog
CRITICAL
CVE-2026-110063
Privilege Escalation
VM Inspector for Azure Virtual Machines
NO AUTH NETWORK
Critical
CVE-2026-110063
11d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct VM Inspector for Azure Virtual Machines
MSRC Security Blog
CRITICAL
CVE-2026-83831
Remote Code Execution
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-83831
17d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
CRITICAL
CVE-2026-85890
Remote Code Execution
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-85890
17d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
CRITICAL
CVE-2026-85897
Remote Code Execution
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-85897
17d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
CRITICAL
CVE-2026-85898
Remote Code Execution
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-85898
17d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
CRITICAL
CVE-2026-96198
Remote Code Execution
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-96198
17d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
CRITICAL
CVE-2026-96199
Remote Code Execution
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-96199
17d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
CRITICAL
CVE-2026-96202
Remote Code Execution
Windows Raw Image Extension
NO AUTH NETWORK
Critical
CVE-2026-96202
17d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Raw Image Extension
MSRC Security Blog
CRITICAL
CVE-2026-102849
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-102849
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-102850
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-102850
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-108400
Remote Code Execution
HEVC Video Extensions
NO AUTH NETWORK
Critical
CVE-2026-108400
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct HEVC Video Extensions
MSRC Security Blog
CRITICAL
CVE-2026-108457
Remote Code Execution
Microsoft Windows PDF
NO AUTH NETWORK
Critical
CVE-2026-108457
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows PDF
MSRC Security Blog
CRITICAL
CVE-2026-102235
Remote Code Execution
Visual Studio Code
NO AUTH NETWORK
Critical
CVE-2026-102235
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
CRITICAL
CVE-2026-102238
Remote Code Execution
Visual Studio Code
NO AUTH NETWORK
Critical
CVE-2026-102238
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
CRITICAL
CVE-2026-70098
Remote Code Execution
Visual Studio Code
NO AUTH NETWORK
Critical
CVE-2026-70098
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
CRITICAL
CVE-2026-102855
Remote Code Execution
Microsoft Office Visio
NO AUTH NETWORK
Critical
CVE-2026-102855
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Visio
MSRC Security Blog
CRITICAL
CVE-2026-102856
Remote Code Execution
Microsoft Office Visio
NO AUTH NETWORK
Critical
CVE-2026-102856
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Visio
MSRC Security Blog
CRITICAL
CVE-2026-102857
Remote Code Execution
Microsoft Office Visio
NO AUTH NETWORK
Critical
CVE-2026-102857
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Visio
MSRC Security Blog
CRITICAL
CVE-2026-102866
Privilege Escalation
Microsoft Office SharePoint
NO AUTH NETWORK
Critical
CVE-2026-102866
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Microsoft Office SharePoint
MSRC Security Blog
CRITICAL
CVE-2026-105591
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-105591
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-105592
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-105592
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-105593
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-105593
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-105595
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-105595
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-105596
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-105596
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-105597
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-105597
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-105598
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-105598
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-105714
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-105714
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-105716
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-105716
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-108458
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-108458
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69370
Remote Code Execution
Visual Studio Code
NO AUTH NETWORK
Critical
CVE-2026-69370
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
CRITICAL
CVE-2026-105717
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-105717
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-108460
Remote Code Execution
Windows Message Queuing
NO AUTH NETWORK
Critical
CVE-2026-108460
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Message Queuing
MSRC Security Blog
CRITICAL
CVE-2026-69639
Remote Code Execution
Windows libarchive
NO AUTH NETWORK
Critical
CVE-2026-69639
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows libarchive
MSRC Security Blog
CRITICAL
CVE-2026-69913
Remote Code Execution
Windows TCP/IP
NO AUTH NETWORK
Critical
CVE-2026-69913
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows TCP/IP
MSRC Security Blog
CRITICAL
CVE-2026-69976
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-69976
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-70058
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-70058
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-70062
Remote Code Execution
Windows libarchive
NO AUTH NETWORK
Critical
CVE-2026-70062
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows libarchive
MSRC Security Blog
CRITICAL
CVE-2026-70127
Remote Code Execution
Windows Domain Name Service
NO AUTH NETWORK
Critical
CVE-2026-70127
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
MSRC Security Blog
CRITICAL
CVE-2026-69521
Remote Code Execution
Windows iSCSI
NO AUTH NETWORK
Critical
CVE-2026-69521
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows iSCSI
MSRC Security Blog
CRITICAL
CVE-2026-69705
Remote Code Execution
Windows iSCSI
NO AUTH NETWORK
Critical
CVE-2026-69705
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows iSCSI
MSRC Security Blog
CRITICAL
CVE-2026-69634
Remote Code Execution
Windows iSCSI
NO AUTH NETWORK
Critical
CVE-2026-69634
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows iSCSI
MSRC Security Blog
CRITICAL
CVE-2026-69883
Remote Code Execution
Windows iSCSI
NO AUTH NETWORK
Critical
CVE-2026-69883
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows iSCSI
MSRC Security Blog
CRITICAL
CVE-2026-69830
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-69830
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-83578
Remote Code Execution
Microsoft PowerShell
NO AUTH NETWORK
Critical
CVE-2026-83578
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft PowerShell
MSRC Security Blog
CRITICAL
CVE-2026-83642
Remote Code Execution
Windows Domain Name Service
NO AUTH NETWORK
Critical
CVE-2026-83642
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
MSRC Security Blog
CRITICAL
CVE-2026-83688
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-83688
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-83693
Remote Code Execution
Windows Error Reporting
NO AUTH NETWORK
Critical
CVE-2026-83693
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Error Reporting
MSRC Security Blog
CRITICAL
CVE-2026-83748
Remote Code Execution
Windows Error Reporting
NO AUTH NETWORK
Critical
CVE-2026-83748
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Error Reporting
MSRC Security Blog
CRITICAL
CVE-2026-83754
Remote Code Execution
Microsoft OpenSSH for Windows
NO AUTH NETWORK
Critical
CVE-2026-83754
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft OpenSSH for Windows
MSRC Security Blog
CRITICAL
CVE-2026-83780
Remote Code Execution
Windows CCFFilter Driver
NO AUTH NETWORK
Critical
CVE-2026-83780
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows CCFFilter Driver
MSRC Security Blog
CRITICAL
CVE-2026-83844
Remote Code Execution
Windows Paint
NO AUTH NETWORK
Critical
CVE-2026-83844
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Paint
MSRC Security Blog
CRITICAL
CVE-2026-83851
Privilege Escalation
Windows Partition Management Driver
NO AUTH NETWORK
Critical
CVE-2026-83851
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows Partition Management Driver
MSRC Security Blog
CRITICAL
CVE-2026-83869
Remote Code Execution
Windows Domain Name Service
NO AUTH NETWORK
Critical
CVE-2026-83869
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
MSRC Security Blog
CRITICAL
CVE-2026-70089
Remote Code Execution
Windows GDI
NO AUTH NETWORK
Critical
CVE-2026-70089
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows GDI
MSRC Security Blog
CRITICAL
CVE-2026-70275
Remote Code Execution
Windows CD-ROM File System Driver
NO AUTH NETWORK
Critical
CVE-2026-70275
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows CD-ROM File System Driver
MSRC Security Blog
CRITICAL
CVE-2026-83914
Remote Code Execution
Microsoft XML
NO AUTH NETWORK
Critical
CVE-2026-83914
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft XML
MSRC Security Blog
CRITICAL
CVE-2026-83928
Remote Code Execution
Windows Local Security Authority Subsystem S
NO AUTH NETWORK
Critical
CVE-2026-83928
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Local Security Authority Subsystem Service (LSASS)
MSRC Security Blog
CRITICAL
CVE-2026-83929
Remote Code Execution
Windows GDI
NO AUTH NETWORK
Critical
CVE-2026-83929
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows GDI
MSRC Security Blog
CRITICAL
CVE-2026-69886
Remote Code Execution
Windows Imaging Component
NO AUTH NETWORK
Critical
CVE-2026-69886
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Imaging Component
MSRC Security Blog
CRITICAL
CVE-2026-84012
Remote Code Execution
Windows Remote Desktop Services
NO AUTH NETWORK
Critical
CVE-2026-84012
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Remote Desktop Services
MSRC Security Blog
CRITICAL
CVE-2026-84015
Remote Code Execution
Remote Access Point-to-Point Protocol (PPP)
NO AUTH NETWORK
Critical
CVE-2026-84015
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Access Point-to-Point Protocol (PPP) EAP-TLS
MSRC Security Blog
CRITICAL
CVE-2026-85371
Remote Code Execution
Network Policy Server (NPS)
NO AUTH NETWORK
Critical
CVE-2026-85371
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Network Policy Server (NPS)
MSRC Security Blog
CRITICAL
CVE-2026-85799
Remote Code Execution
Network Policy Server (NPS)
NO AUTH NETWORK
Critical
CVE-2026-85799
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Network Policy Server (NPS)
MSRC Security Blog
CRITICAL
CVE-2026-85814
Remote Code Execution
Microsoft Windows Media Foundation
NO AUTH NETWORK
Critical
CVE-2026-85814
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
MSRC Security Blog
CRITICAL
CVE-2026-85817
Remote Code Execution
Microsoft PowerShell
NO AUTH NETWORK
Critical
CVE-2026-85817
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft PowerShell
MSRC Security Blog
CRITICAL
CVE-2026-88157
Remote Code Execution
Microsoft OpenSSH for Windows
NO AUTH NETWORK
Critical
CVE-2026-88157
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft OpenSSH for Windows
MSRC Security Blog
CRITICAL
CVE-2026-88159
Remote Code Execution
Windows Background Intelligent Transfer Serv
NO AUTH NETWORK
Critical
CVE-2026-88159
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Background Intelligent Transfer Service (BITS)
MSRC Security Blog
CRITICAL
CVE-2026-88173
Remote Code Execution
Windows Background Intelligent Transfer Serv
NO AUTH NETWORK
Critical
CVE-2026-88173
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Background Intelligent Transfer Service (BITS)
MSRC Security Blog
CRITICAL
CVE-2026-70187
Remote Code Execution
Windows Remote Desktop Services
NO AUTH NETWORK
Critical
CVE-2026-70187
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Remote Desktop Services
MSRC Security Blog
CRITICAL
CVE-2026-70210
Privilege Escalation
Windows OLE DB
NO AUTH NETWORK
Critical
CVE-2026-70210
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows OLE DB
MSRC Security Blog
CRITICAL
CVE-2026-70262
Privilege Escalation
WebDAV
NO AUTH NETWORK
Critical
CVE-2026-70262
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct WebDAV
MSRC Security Blog
CRITICAL
CVE-2026-83888
Privilege Escalation
Windows CD-ROM Driver
NO AUTH NETWORK
Critical
CVE-2026-83888
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows CD-ROM Driver
MSRC Security Blog
CRITICAL
CVE-2026-85926
Remote Code Execution
Windows Secure Socket Tunneling Protocol (SS
NO AUTH NETWORK
Critical
CVE-2026-85926
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Secure Socket Tunneling Protocol (SSTP)
MSRC Security Blog
CRITICAL
CVE-2026-85928
Remote Code Execution
Windows Volume Manager Extension Driver
NO AUTH NETWORK
Critical
CVE-2026-85928
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Volume Manager Extension Driver
MSRC Security Blog
CRITICAL
CVE-2026-85936
Remote Code Execution
Windows Shell
NO AUTH NETWORK
Critical
CVE-2026-85936
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Shell
MSRC Security Blog
CRITICAL
CVE-2026-88102
Remote Code Execution
Microsoft Failover Cluster
NO AUTH NETWORK
Critical
CVE-2026-88102
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Failover Cluster
MSRC Security Blog
CRITICAL
CVE-2026-70024
Remote Code Execution
Windows Internet Information Services
NO AUTH NETWORK
Critical
CVE-2026-70024
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Internet Information Services
MSRC Security Blog
CRITICAL
CVE-2026-70038
Remote Code Execution
Windows iSCSI
NO AUTH NETWORK
Critical
CVE-2026-70038
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows iSCSI
MSRC Security Blog
CRITICAL
CVE-2026-70068
Privilege Escalation
Windows Client-Side Caching (CSC) Service
NO AUTH NETWORK
Critical
CVE-2026-70068
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows Client-Side Caching (CSC) Service
MSRC Security Blog
CRITICAL
CVE-2026-70147
Remote Code Execution
Microsoft PostScript Printer Driver
NO AUTH NETWORK
Critical
CVE-2026-70147
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft PostScript Printer Driver
MSRC Security Blog
CRITICAL
CVE-2026-70175
Privilege Escalation
ASP.NET Core
NO AUTH NETWORK
Critical
CVE-2026-70175
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct ASP.NET Core
MSRC Security Blog
CRITICAL
CVE-2026-70256
Remote Code Execution
Microsoft Office Outlook
NO AUTH NETWORK
Critical
CVE-2026-70256
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
MSRC Security Blog
CRITICAL
CVE-2026-70257
Remote Code Execution
Microsoft Office Outlook
NO AUTH NETWORK
Critical
CVE-2026-70257
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
MSRC Security Blog
CRITICAL
CVE-2026-70282
Remote Code Execution
Microsoft Office Outlook
NO AUTH NETWORK
Critical
CVE-2026-70282
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
MSRC Security Blog
CRITICAL
CVE-2026-70300
Remote Code Execution
Microsoft Office Word
NO AUTH NETWORK
Critical
CVE-2026-70300
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Word
MSRC Security Blog
CRITICAL
CVE-2026-96219
Remote Code Execution
Windows Local Security Authority Subsystem S
NO AUTH NETWORK
Critical
CVE-2026-96219
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Local Security Authority Subsystem Service (LSASS)
MSRC Security Blog
CRITICAL
CVE-2026-96864
Remote Code Execution
Microsoft Failover Cluster Virtual Driver
NO AUTH NETWORK
Critical
CVE-2026-96864
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Failover Cluster Virtual Driver
MSRC Security Blog
CRITICAL
CVE-2026-96943
Remote Code Execution
Windows Raw Image Extension
NO AUTH NETWORK
Critical
CVE-2026-96943
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Raw Image Extension
MSRC Security Blog
CRITICAL
CVE-2026-97012
Remote Code Execution
Microsoft Office Outlook
NO AUTH NETWORK
Critical
CVE-2026-97012
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
MSRC Security Blog
CRITICAL
CVE-2026-97016
Remote Code Execution
Microsoft Office Outlook
NO AUTH NETWORK
Critical
CVE-2026-97016
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
MSRC Security Blog
CRITICAL
CVE-2026-97749
Remote Code Execution
Microsoft Office Outlook
NO AUTH NETWORK
Critical
CVE-2026-97749
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
MSRC Security Blog
CRITICAL
CVE-2026-96096
Remote Code Execution
Windows Media Player
NO AUTH NETWORK
Critical
CVE-2026-96096
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Media Player
MSRC Security Blog
CRITICAL
CVE-2026-97789
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-97789
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69984
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-69984
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69985
Remote Code Execution
Windows libarchive
NO AUTH NETWORK
Critical
CVE-2026-69985
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows libarchive
MSRC Security Blog
CRITICAL
CVE-2026-69986
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-69986
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69988
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-69988
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69987
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-69987
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69995
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-69995
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69997
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-69997
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69996
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-69996
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69991
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-69991
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69994
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-69994
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69992
Remote Code Execution
Remote Desktop Services
NO AUTH NETWORK
Critical
CVE-2026-69992
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Services
MSRC Security Blog
CRITICAL
CVE-2026-69998
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-69998
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-70012
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-70012
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-70004
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-70004
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-70006
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-70006
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-70157
Remote Code Execution
Windows System Information Console
NO AUTH NETWORK
Critical
CVE-2026-70157
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows System Information Console
MSRC Security Blog
CRITICAL
CVE-2026-70258
Remote Code Execution
Microsoft Windows Media Foundation
NO AUTH NETWORK
Critical
CVE-2026-70258
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
MSRC Security Blog
CRITICAL
CVE-2026-69765
Remote Code Execution
Windows Storport Miniport Driver
NO AUTH NETWORK
Critical
CVE-2026-69765
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Storport Miniport Driver
MSRC Security Blog
CRITICAL
CVE-2026-77496
Remote Code Execution
Windows Imaging Component
NO AUTH NETWORK
Critical
CVE-2026-77496
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Imaging Component
MSRC Security Blog
CRITICAL
CVE-2026-69326
Remote Code Execution
Graphic Fonts
NO AUTH NETWORK
Critical
CVE-2026-69326
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Graphic Fonts
MSRC Security Blog
CRITICAL
CVE-2026-83517
Remote Code Execution
Microsoft Windows Media Foundation
NO AUTH NETWORK
Critical
CVE-2026-83517
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
MSRC Security Blog
CRITICAL
CVE-2026-83523
Remote Code Execution
Windows Image Acquisition
NO AUTH NETWORK
Critical
CVE-2026-83523
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Image Acquisition
MSRC Security Blog
CRITICAL
CVE-2026-83643
Remote Code Execution
Windows Error Reporting
NO AUTH NETWORK
Critical
CVE-2026-83643
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Error Reporting
MSRC Security Blog
CRITICAL
CVE-2026-83725
Remote Code Execution
Microsoft Windows Search Component
NO AUTH NETWORK
Critical
CVE-2026-83725
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Search Component
MSRC Security Blog
CRITICAL
CVE-2026-83770
Remote Code Execution
Windows Text Shaping
NO AUTH NETWORK
Critical
CVE-2026-83770
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Text Shaping
MSRC Security Blog
CRITICAL
CVE-2026-83778
Remote Code Execution
Microsoft Internet Messaging API
NO AUTH NETWORK
Critical
CVE-2026-83778
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Internet Messaging API
MSRC Security Blog
CRITICAL
CVE-2026-83789
Privilege Escalation
Windows SMB Client
NO AUTH NETWORK
Critical
CVE-2026-83789
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows SMB Client
MSRC Security Blog
CRITICAL
CVE-2026-83797
Remote Code Execution
Windows Partition Management Driver
NO AUTH NETWORK
Critical
CVE-2026-83797
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Partition Management Driver
MSRC Security Blog
CRITICAL
CVE-2026-83856
Remote Code Execution
Windows Event Logging Service
NO AUTH NETWORK
Critical
CVE-2026-83856
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Event Logging Service
MSRC Security Blog
CRITICAL
CVE-2026-83874
Remote Code Execution
Windows Event Tracing
NO AUTH NETWORK
Critical
CVE-2026-83874
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Event Tracing
MSRC Security Blog
CRITICAL
CVE-2026-85903
Remote Code Execution
Windows Domain Name Service
NO AUTH NETWORK
Critical
CVE-2026-85903
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
MSRC Security Blog
CRITICAL
CVE-2026-83910
Remote Code Execution
RPC Runtime Library
NO AUTH NETWORK
Critical
CVE-2026-83910
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct RPC Runtime Library
MSRC Security Blog
CRITICAL
CVE-2026-83923
Remote Code Execution
Microsoft OpenSSH for Windows
NO AUTH NETWORK
Critical
CVE-2026-83923
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft OpenSSH for Windows
MSRC Security Blog
CRITICAL
CVE-2026-83934
Remote Code Execution
Windows GDI+
NO AUTH NETWORK
Critical
CVE-2026-83934
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows GDI+
MSRC Security Blog
CRITICAL
CVE-2026-83935
Remote Code Execution
Microsoft XML
NO AUTH NETWORK
Critical
CVE-2026-83935
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft XML
MSRC Security Blog
CRITICAL
CVE-2026-88115
Remote Code Execution
Windows Server for NFS
NO AUTH NETWORK
Critical
CVE-2026-88115
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Server for NFS
MSRC Security Blog
CRITICAL
CVE-2026-88121
Remote Code Execution
Windows Background Intelligent Transfer Serv
NO AUTH NETWORK
Critical
CVE-2026-88121
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Background Intelligent Transfer Service (BITS)
MSRC Security Blog
CRITICAL
CVE-2026-88142
Remote Code Execution
Windows Background Intelligent Transfer Serv
NO AUTH NETWORK
Critical
CVE-2026-88142
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Background Intelligent Transfer Service (BITS)
MSRC Security Blog
CRITICAL
CVE-2026-88171
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-88171
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-88174
Remote Code Execution
Windows Deployment Services
NO AUTH NETWORK
Critical
CVE-2026-88174
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Deployment Services
MSRC Security Blog
CRITICAL
CVE-2026-70111
Privilege Escalation
Windows Kernel
NO AUTH NETWORK
Critical
CVE-2026-70111
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows Kernel
MSRC Security Blog
CRITICAL
CVE-2026-70229
Remote Code Execution
Windows Active Directory Domain Services
NO AUTH NETWORK
Critical
CVE-2026-70229
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Active Directory Domain Services
MSRC Security Blog
CRITICAL
CVE-2026-70571
Remote Code Execution
Microsoft Exchange Server
NO AUTH NETWORK
Critical
CVE-2026-70571
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Exchange Server
MSRC Security Blog
CRITICAL
CVE-2026-88083
Remote Code Execution
Microsoft SQL Server
NO AUTH NETWORK
Critical
CVE-2026-88083
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft SQL Server
MSRC Security Blog
CRITICAL
CVE-2026-88112
Remote Code Execution
Windows Domain Name Service
NO AUTH NETWORK
Critical
CVE-2026-88112
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
MSRC Security Blog
CRITICAL
CVE-2026-88114
Remote Code Execution
Windows Domain Name Service
NO AUTH NETWORK
Critical
CVE-2026-88114
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
MSRC Security Blog
CRITICAL
CVE-2026-88116
Remote Code Execution
Windows Domain Name Service
NO AUTH NETWORK
Critical
CVE-2026-88116
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
MSRC Security Blog
CRITICAL
CVE-2026-88117
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-88117
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-88119
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-88119
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-88120
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-88120
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-69802
Remote Code Execution
Network Device Enrollment Service (NDES)
NO AUTH NETWORK
Critical
CVE-2026-69802
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Network Device Enrollment Service (NDES)
MSRC Security Blog
CRITICAL
CVE-2026-70153
Remote Code Execution
Microsoft PostScript Printer Driver
NO AUTH NETWORK
Critical
CVE-2026-70153
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft PostScript Printer Driver
MSRC Security Blog
CRITICAL
CVE-2026-70242
Remote Code Execution
Microsoft Office Outlook
NO AUTH NETWORK
Critical
CVE-2026-70242
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
MSRC Security Blog
CRITICAL
CVE-2026-70343
Remote Code Execution
Microsoft MPEG-2 Video Extension
NO AUTH NETWORK
Critical
CVE-2026-70343
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft MPEG-2 Video Extension
MSRC Security Blog
CRITICAL
CVE-2026-70035
Remote Code Execution
.NET Framework
NO AUTH NETWORK
Critical
CVE-2026-70035
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct .NET Framework
MSRC Security Blog
CRITICAL
CVE-2026-83520
Remote Code Execution
.NET
NO AUTH NETWORK
Critical
CVE-2026-83520
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct .NET
MSRC Security Blog
CRITICAL
CVE-2026-96230
Remote Code Execution
ASP.NET Core
NO AUTH NETWORK
Critical
CVE-2026-96230
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct ASP.NET Core
MSRC Security Blog
CRITICAL
CVE-2026-96320
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-96320
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-96909
Remote Code Execution
Windows BitLocker
NO AUTH NETWORK
Critical
CVE-2026-96909
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows BitLocker
MSRC Security Blog
CRITICAL
CVE-2026-96924
Remote Code Execution
Windows OLE
NO AUTH NETWORK
Critical
CVE-2026-96924
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows OLE
MSRC Security Blog
CRITICAL
CVE-2026-96934
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-96934
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-21413
Remote Code Execution
Raw Image Extension
NO AUTH NETWORK
Critical
CVE-2026-21413
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Raw Image Extension
MSRC Security Blog
CRITICAL
CVE-2026-96951
Security Bypass
Windows Shell
EXPLOITED NO AUTH NETWORK
Critical
CVE-2026-96951
Exploited in the wild
20d
Listed in CISA's Known Exploited Vulnerabilities catalog — attackers are already using it.
Impact Security BypassVector NetworkAuth None requiredProduct Windows Shell
MSRC Security Blog
CRITICAL
CVE-2026-96952
Remote Code Execution
Microsoft Windows Media Foundation
NO AUTH NETWORK
Critical
CVE-2026-96952
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
MSRC Security Blog
CRITICAL
CVE-2026-96071
Remote Code Execution
Windows Media
NO AUTH NETWORK
Critical
CVE-2026-96071
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Media
MSRC Security Blog
CRITICAL
CVE-2026-100202
Remote Code Execution
Windows Message Queuing Queue Manager
NO AUTH NETWORK
Critical
CVE-2026-100202
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Message Queuing Queue Manager
MSRC Security Blog
CRITICAL
CVE-2026-100218
Remote Code Execution
Remote Desktop Gateway Service
NO AUTH NETWORK
Critical
CVE-2026-100218
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Gateway Service
MSRC Security Blog
CRITICAL
CVE-2026-100219
Remote Code Execution
Microsoft QUIC
NO AUTH NETWORK
Critical
CVE-2026-100219
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft QUIC
MSRC Security Blog
CRITICAL
CVE-2026-100220
Remote Code Execution
Windows Media Video Decoder
NO AUTH NETWORK
Critical
CVE-2026-100220
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Media Video Decoder
MSRC Security Blog
CRITICAL
CVE-2026-88219
Remote Code Execution
RPC Runtime Library
NO AUTH NETWORK
Critical
CVE-2026-88219
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct RPC Runtime Library
MSRC Security Blog
CRITICAL
CVE-2026-100222
Remote Code Execution
Network Policy Server (NPS)
NO AUTH NETWORK
Critical
CVE-2026-100222
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Network Policy Server (NPS)
MSRC Security Blog
CRITICAL
CVE-2026-102203
Remote Code Execution
RPC Runtime
NO AUTH NETWORK
Critical
CVE-2026-102203
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct RPC Runtime
MSRC Security Blog
CRITICAL
CVE-2026-102210
Remote Code Execution
Windows Text Shaping
NO AUTH NETWORK
Critical
CVE-2026-102210
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Text Shaping
MSRC Security Blog
CRITICAL
CVE-2026-102225
Remote Code Execution
Windows Text Shaping
NO AUTH NETWORK
Critical
CVE-2026-102225
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Text Shaping
MSRC Security Blog
CRITICAL
CVE-2026-102869
Privilege Escalation
.NET and Visual Studio
NO AUTH NETWORK
Critical
CVE-2026-102869
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct .NET and Visual Studio
MSRC Security Blog
CRITICAL
CVE-2026-103575
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-103575
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-105005
Remote Code Execution
Windows Schannel
NO AUTH NETWORK
Critical
CVE-2026-105005
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Schannel
MSRC Security Blog
CRITICAL
CVE-2026-105010
Privilege Escalation
Microsoft Windows Search Component
NO AUTH NETWORK
Critical
CVE-2026-105010
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Microsoft Windows Search Component
MSRC Security Blog
CRITICAL
CVE-2026-96113
Remote Code Execution
Windows Domain Name Service
NO AUTH NETWORK
Critical
CVE-2026-96113
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
MSRC Security Blog
CRITICAL
CVE-2026-97805
Remote Code Execution
Windows Partition Management Driver
NO AUTH NETWORK
Critical
CVE-2026-97805
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Partition Management Driver
MSRC Security Blog
CRITICAL
CVE-2026-97814
Remote Code Execution
Windows Text Shaping
NO AUTH NETWORK
Critical
CVE-2026-97814
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Text Shaping
MSRC Security Blog
CRITICAL
CVE-2026-97815
Remote Code Execution
Windows Error Reporting
NO AUTH NETWORK
Critical
CVE-2026-97815
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Error Reporting
MSRC Security Blog
CRITICAL
CVE-2026-97816
Remote Code Execution
Microsoft OpenSSH for Windows
NO AUTH NETWORK
Critical
CVE-2026-97816
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft OpenSSH for Windows
MSRC Security Blog
CRITICAL
CVE-2026-105016
Remote Code Execution
Microsoft QUIC
NO AUTH NETWORK
Critical
CVE-2026-105016
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft QUIC
MSRC Security Blog
CRITICAL
CVE-2026-97781
Remote Code Execution
Microsoft Office OneNote
NO AUTH NETWORK
Critical
CVE-2026-97781
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office OneNote
MSRC Security Blog
SEVERE
CVE-2026-118147
Spoofing
Visual Studio
NO AUTH NETWORK
Severe
CVE-2026-118147
3d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Visual Studio
MSRC Security Blog
SEVERE
CVE-2026-20942
Spoofing
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Severe
CVE-2026-20942
6d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
SEVERE
CVE-2026-96196
Security Bypass
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Severe
CVE-2026-96196
6d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
SEVERE
CVE-2026-108456
Privilege Escalation
Azure AI Foundry
NETWORK
Severe
CVE-2026-108456
11d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Azure AI Foundry
MSRC Security Blog
SEVERE
CVE-2026-96185
Remote Code Execution
Microsoft Exchange Online
NETWORK
Severe
CVE-2026-96185
11d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Exchange Online
MSRC Security Blog
SEVERE
CVE-2026-105727
Privilege Escalation
Microsoft Dynamics 365 Business Central
NETWORK
Severe
CVE-2026-105727
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Dynamics 365 Business Central
MSRC Security Blog
SEVERE
CVE-2026-102231
Security Bypass
Visual Studio Code
NO AUTH LOCAL
Severe
CVE-2026-102231
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector LocalAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-102232
Security Bypass
Visual Studio Code
NO AUTH LOCAL
Severe
CVE-2026-102232
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector LocalAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-102233
Security Bypass
Visual Studio Code
NO AUTH LOCAL
Severe
CVE-2026-102233
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector LocalAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-102234
Security Bypass
Visual Studio Code
NO AUTH NETWORK
Severe
CVE-2026-102234
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-96956
Privilege Escalation
SQL Server
NETWORK
Severe
CVE-2026-96956
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct SQL Server
MSRC Security Blog
SEVERE
CVE-2026-102860
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-102860
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-102861
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-102861
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-102862
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-102862
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-102863
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-102863
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-102867
Information Disclosure
Microsoft Office Word
NO AUTH NETWORK
Severe
CVE-2026-102867
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Word
MSRC Security Blog
SEVERE
CVE-2026-94506
Information Disclosure
Microsoft Office Access
NO AUTH NETWORK
Severe
CVE-2026-94506
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
SEVERE
CVE-2026-105720
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-105720
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-108467
Remote Code Execution
Microsoft PostScript Printer Driver
NETWORK
Severe
CVE-2026-108467
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft PostScript Printer Driver
MSRC Security Blog
SEVERE
CVE-2026-108466
Denial of Service
Windows Kernel
NO AUTH NETWORK
Severe
CVE-2026-108466
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Kernel
MSRC Security Blog
SEVERE
CVE-2026-69363
Privilege Escalation
Windows Error Reporting
NETWORK
Severe
CVE-2026-69363
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Error Reporting
MSRC Security Blog
SEVERE
CVE-2026-69947
Remote Code Execution
Windows Overlay Filter
NO AUTH UNSPECIFIED
Severe
CVE-2026-69947
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionAuth None requiredProduct Windows Overlay Filter
MSRC Security Blog
SEVERE
CVE-2026-69958
Remote Code Execution
Windows Overlay Filter
NO AUTH UNSPECIFIED
Severe
CVE-2026-69958
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionAuth None requiredProduct Windows Overlay Filter
MSRC Security Blog
SEVERE
CVE-2026-69968
Spoofing
Windows libarchive
NO AUTH NETWORK
Severe
CVE-2026-69968
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Windows libarchive
MSRC Security Blog
SEVERE
CVE-2026-69973
Spoofing
Windows libarchive
NO AUTH NETWORK
Severe
CVE-2026-69973
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Windows libarchive
MSRC Security Blog
SEVERE
CVE-2026-70014
Remote Code Execution
Windows Cryptographic Services
NETWORK
Severe
CVE-2026-70014
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Cryptographic Services
MSRC Security Blog
SEVERE
CVE-2026-70033
Denial of Service
Windows Remote Desktop Gateway (RD Gateway)
NO AUTH NETWORK
Severe
CVE-2026-70033
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Remote Desktop Gateway (RD Gateway)
MSRC Security Blog
SEVERE
CVE-2026-70079
Denial of Service
Windows DNS
NO AUTH NETWORK
Severe
CVE-2026-70079
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DNS
MSRC Security Blog
SEVERE
CVE-2026-70082
Denial of Service
Windows DNS
NO AUTH NETWORK
Severe
CVE-2026-70082
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DNS
MSRC Security Blog
SEVERE
CVE-2026-70126
Remote Code Execution
Windows Bluetooth Port Driver
NO AUTH ADJACENT
Severe
CVE-2026-70126
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector AdjacentAuth None requiredProduct Windows Bluetooth Port Driver
MSRC Security Blog
SEVERE
CVE-2026-70119
Remote Code Execution
Windows DNS
NETWORK
Severe
CVE-2026-70119
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows DNS
MSRC Security Blog
SEVERE
CVE-2026-70155
Denial of Service
Windows DNS
NO AUTH NETWORK
Severe
CVE-2026-70155
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DNS
MSRC Security Blog
SEVERE
CVE-2026-70133
Denial of Service
Windows SMB Server
NO AUTH NETWORK
Severe
CVE-2026-70133
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows SMB Server
MSRC Security Blog
SEVERE
CVE-2026-67625
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67625
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-83516
Denial of Service
Windows Local Security Authority Subsystem S
NO AUTH NETWORK
Severe
CVE-2026-83516
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Local Security Authority Subsystem Service (LSASS)
MSRC Security Blog
SEVERE
CVE-2026-83515
Information Disclosure
RPC Runtime
NO AUTH NETWORK
Severe
CVE-2026-83515
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct RPC Runtime
MSRC Security Blog
SEVERE
CVE-2026-83635
Denial of Service
Role: DNS Server
NO AUTH NETWORK
Severe
CVE-2026-83635
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Role: DNS Server
MSRC Security Blog
SEVERE
CVE-2026-83655
Denial of Service
Network Policy Server (NPS)
NO AUTH NETWORK
Severe
CVE-2026-83655
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Network Policy Server (NPS)
MSRC Security Blog
SEVERE
CVE-2026-83759
Remote Code Execution
Windows Encrypting File System (EFS)
NETWORK
Severe
CVE-2026-83759
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Encrypting File System (EFS)
MSRC Security Blog
SEVERE
CVE-2026-83776
Privilege Escalation
Windows Bluetooth Driver
NO AUTH UNSPECIFIED
Severe
CVE-2026-83776
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Windows Bluetooth Driver
MSRC Security Blog
SEVERE
CVE-2026-83784
Privilege Escalation
Windows Encrypting File System (EFS)
NETWORK
Severe
CVE-2026-83784
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Encrypting File System (EFS)
MSRC Security Blog
SEVERE
CVE-2026-83836
Remote Code Execution
Windows Event Tracing
NO AUTH LOCAL
Severe
CVE-2026-83836
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector LocalAuth None requiredProduct Windows Event Tracing
MSRC Security Blog
SEVERE
CVE-2026-83843
Denial of Service
Windows Internet Key Exchange (IKE) Extensio
NO AUTH NETWORK
Severe
CVE-2026-83843
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Internet Key Exchange (IKE) Extension
MSRC Security Blog
SEVERE
CVE-2026-83855
Denial of Service
Windows WLAN Service
NO AUTH NETWORK
Severe
CVE-2026-83855
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows WLAN Service
MSRC Security Blog
SEVERE
CVE-2026-70163
Denial of Service
Microsoft OpenSSH for Windows
NO AUTH NETWORK
Severe
CVE-2026-70163
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Microsoft OpenSSH for Windows
MSRC Security Blog
SEVERE
CVE-2026-83906
Spoofing
Windows Shell
NO AUTH NETWORK
Severe
CVE-2026-83906
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Windows Shell
MSRC Security Blog
SEVERE
CVE-2026-85841
Remote Code Execution
Windows DHCP Server
NETWORK
Severe
CVE-2026-85841
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-84017
Denial of Service
Windows Routing and Remote Access Service (R
NO AUTH NETWORK
Severe
CVE-2026-84017
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Routing and Remote Access Service (RRAS)
MSRC Security Blog
SEVERE
CVE-2026-85319
Denial of Service
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-85319
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-85321
Denial of Service
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-85321
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-85322
Information Disclosure
Windows Routing and Remote Access Service (R
NO AUTH NETWORK
Severe
CVE-2026-85322
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Routing and Remote Access Service (RRAS)
MSRC Security Blog
SEVERE
CVE-2026-85324
Denial of Service
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-85324
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-85334
Information Disclosure
Windows Message Queuing Queue Manager
NO AUTH NETWORK
Severe
CVE-2026-85334
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Message Queuing Queue Manager
MSRC Security Blog
SEVERE
CVE-2026-85353
Information Disclosure
Windows Print Spooler Components
NO AUTH NETWORK
Severe
CVE-2026-85353
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Print Spooler Components
MSRC Security Blog
SEVERE
CVE-2026-85337
Information Disclosure
Windows Remote Desktop Client
NO AUTH NETWORK
Severe
CVE-2026-85337
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Remote Desktop Client
MSRC Security Blog
SEVERE
CVE-2026-85797
Information Disclosure
Windows GDI
NO AUTH NETWORK
Severe
CVE-2026-85797
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows GDI
MSRC Security Blog
SEVERE
CVE-2026-85798
Remote Code Execution
Windows Distributed File System (DFS)
NETWORK
Severe
CVE-2026-85798
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Distributed File System (DFS)
MSRC Security Blog
SEVERE
CVE-2026-85805
Security Bypass
Microsoft PowerShell
NO AUTH NETWORK
Severe
CVE-2026-85805
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Microsoft PowerShell
MSRC Security Blog
SEVERE
CVE-2026-85808
Denial of Service
Windows Routing and Remote Access Service (R
NO AUTH NETWORK
Severe
CVE-2026-85808
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Routing and Remote Access Service (RRAS)
MSRC Security Blog
SEVERE
CVE-2026-85811
Remote Code Execution
Network Policy Server (NPS)
NO AUTH ADJACENT
Severe
CVE-2026-85811
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector AdjacentAuth None requiredProduct Network Policy Server (NPS)
MSRC Security Blog
SEVERE
CVE-2026-85818
Spoofing
Windows Schannel
NO AUTH NETWORK
Severe
CVE-2026-85818
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Windows Schannel
MSRC Security Blog
SEVERE
CVE-2026-85847
Information Disclosure
Windows Print Spooler Components
NO AUTH NETWORK
Severe
CVE-2026-85847
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Print Spooler Components
MSRC Security Blog
SEVERE
CVE-2026-85881
Privilege Escalation
Microsoft Office Graphics
NETWORK
Severe
CVE-2026-85881
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office Graphics
MSRC Security Blog
SEVERE
CVE-2026-85891
Information Disclosure
Azure HDInsight
NO AUTH NETWORK
Severe
CVE-2026-85891
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Azure HDInsight
MSRC Security Blog
SEVERE
CVE-2026-88165
Remote Code Execution
Windows Active Directory Domain Services
NETWORK
Severe
CVE-2026-88165
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Active Directory Domain Services
MSRC Security Blog
SEVERE
CVE-2026-69943
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-69943
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-69877
Information Disclosure
Azure DevOps
NO AUTH NETWORK
Severe
CVE-2026-69877
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Azure DevOps
MSRC Security Blog
SEVERE
CVE-2026-70167
Remote Code Execution
Windows Domain Name Service
NETWORK
Severe
CVE-2026-70167
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Domain Name Service
MSRC Security Blog
SEVERE
CVE-2026-70244
Information Disclosure
Windows DNS Server
NO AUTH NETWORK
Severe
CVE-2026-70244
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows DNS Server
MSRC Security Blog
SEVERE
CVE-2026-83674
Spoofing
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-83674
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-85931
Remote Code Execution
Windows Distributed File System (DFS)
NETWORK
Severe
CVE-2026-85931
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Distributed File System (DFS)
MSRC Security Blog
SEVERE
CVE-2026-87713
Remote Code Execution
Windows Bluetooth Port Driver
NO AUTH ADJACENT
Severe
CVE-2026-87713
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector AdjacentAuth None requiredProduct Windows Bluetooth Port Driver
MSRC Security Blog
SEVERE
CVE-2026-68883
Privilege Escalation
Microsoft SQL Server
NETWORK
Severe
CVE-2026-68883
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-83945
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-83945
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-85886
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-85886
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-88099
Denial of Service
Windows Failover Cluster
NO AUTH NETWORK
Severe
CVE-2026-88099
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Failover Cluster
MSRC Security Blog
SEVERE
CVE-2026-88132
Information Disclosure
Azure Key Vault
NO AUTH NETWORK
Severe
CVE-2026-88132
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Azure Key Vault
MSRC Security Blog
SEVERE
CVE-2026-88136
Remote Code Execution
Web Distributed Authoring and Versioning (WE
NETWORK
Severe
CVE-2026-88136
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Web Distributed Authoring and Versioning (WEBDAV)
MSRC Security Blog
SEVERE
CVE-2026-69940
Information Disclosure
Windows Client for NFS
NO AUTH NETWORK
Severe
CVE-2026-69940
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Client for NFS
MSRC Security Blog
SEVERE
CVE-2026-69955
Information Disclosure
Windows Client for NFS
NO AUTH NETWORK
Severe
CVE-2026-69955
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Client for NFS
MSRC Security Blog
SEVERE
CVE-2026-69982
Security Bypass
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-69982
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-70005
Security Bypass
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-70005
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-70131
Privilege Escalation
Microsoft Windows Media Foundation
NO AUTH LOCAL
Severe
CVE-2026-70131
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationVector LocalAuth None requiredProduct Microsoft Windows Media Foundation
MSRC Security Blog
SEVERE
CVE-2026-70110
Privilege Escalation
Microsoft PostScript Printer Driver
NO AUTH LOCAL
Severe
CVE-2026-70110
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationVector LocalAuth None requiredProduct Microsoft PostScript Printer Driver
MSRC Security Blog
SEVERE
CVE-2026-70092
Privilege Escalation
Microsoft PostScript Printer Driver
NO AUTH LOCAL
Severe
CVE-2026-70092
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationVector LocalAuth None requiredProduct Microsoft PostScript Printer Driver
MSRC Security Blog
SEVERE
CVE-2026-70109
Privilege Escalation
Microsoft PostScript Printer Driver
NO AUTH LOCAL
Severe
CVE-2026-70109
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationVector LocalAuth None requiredProduct Microsoft PostScript Printer Driver
MSRC Security Blog
SEVERE
CVE-2026-70196
Denial of Service
ASP.NET Core
NO AUTH NETWORK
Severe
CVE-2026-70196
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct ASP.NET Core
MSRC Security Blog
SEVERE
CVE-2026-70183
Privilege Escalation
ASP.NET Core
NETWORK
Severe
CVE-2026-70183
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct ASP.NET Core
MSRC Security Blog
SEVERE
CVE-2026-70194
Security Bypass
.NET Framework
NO AUTH NETWORK
Severe
CVE-2026-70194
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct .NET Framework
MSRC Security Blog
SEVERE
CVE-2026-70267
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-70267
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-70251
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-70251
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-70266
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-70266
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-85900
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-85900
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-88153
Information Disclosure
Microsoft Office Excel
NO AUTH NETWORK
Severe
CVE-2026-88153
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Excel
MSRC Security Blog
SEVERE
CVE-2026-88151
Information Disclosure
Microsoft Office Excel
NO AUTH NETWORK
Severe
CVE-2026-88151
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Excel
MSRC Security Blog
SEVERE
CVE-2026-88155
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-88155
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-88201
Information Disclosure
Microsoft Office Excel
NO AUTH NETWORK
Severe
CVE-2026-88201
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Excel
MSRC Security Blog
SEVERE
CVE-2026-88198
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-88198
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-96204
Privilege Escalation
Azure Arc
NETWORK
Severe
CVE-2026-96204
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Azure Arc
MSRC Security Blog
SEVERE
CVE-2026-96245
Information Disclosure
Windows Routing and Remote Access Service (R
NO AUTH NETWORK
Severe
CVE-2026-96245
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Routing and Remote Access Service (RRAS)
MSRC Security Blog
SEVERE
CVE-2026-96246
Information Disclosure
Network Policy Server (NPS)
NO AUTH NETWORK
Severe
CVE-2026-96246
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Network Policy Server (NPS)
MSRC Security Blog
SEVERE
CVE-2026-96248
Denial of Service
Windows Host Guardian Service
NO AUTH NETWORK
Severe
CVE-2026-96248
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Host Guardian Service
MSRC Security Blog
SEVERE
CVE-2026-96866
Denial of Service
Network Device Enrollment Service (NDES)
NO AUTH NETWORK
Severe
CVE-2026-96866
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Network Device Enrollment Service (NDES)
MSRC Security Blog
SEVERE
CVE-2026-96863
Privilege Escalation
Windows Storage Port Driver
NO AUTH UNSPECIFIED
Severe
CVE-2026-96863
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Windows Storage Port Driver
MSRC Security Blog
SEVERE
CVE-2026-96861
Denial of Service
Network Device Enrollment Service (NDES)
NO AUTH NETWORK
Severe
CVE-2026-96861
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Network Device Enrollment Service (NDES)
MSRC Security Blog
SEVERE
CVE-2026-69452
Privilege Escalation
Windows Enterprise App Management
NETWORK
Severe
CVE-2026-69452
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Enterprise App Management
MSRC Security Blog
SEVERE
CVE-2026-96996
Remote Code Execution
Microsoft Office Word
NO AUTH LOCAL
Severe
CVE-2026-96996
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector LocalAuth None requiredProduct Microsoft Office Word
MSRC Security Blog
SEVERE
CVE-2026-97009
Remote Code Execution
Microsoft Office Excel
NO AUTH LOCAL
Severe
CVE-2026-97009
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector LocalAuth None requiredProduct Microsoft Office Excel
MSRC Security Blog
SEVERE
CVE-2026-59116
Security Bypass
Windows Remote Desktop
NO AUTH NETWORK
Severe
CVE-2026-59116
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Windows Remote Desktop
MSRC Security Blog
SEVERE
CVE-2026-70069
Remote Code Execution
Windows DHCP Server
NETWORK
Severe
CVE-2026-70069
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-70207
Remote Code Execution
Network Policy Server (NPS)
NETWORK
Severe
CVE-2026-70207
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Network Policy Server (NPS)
MSRC Security Blog
SEVERE
CVE-2026-65674
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-65674
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-69577
Information Disclosure
Microsoft Azure Attestation service and Devi
NO AUTH NETWORK
Severe
CVE-2026-69577
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Azure Attestation service and Device Health Attestation Service
MSRC Security Blog
SEVERE
CVE-2026-69454
Information Disclosure
Microsoft Azure Attestation service and Devi
NO AUTH NETWORK
Severe
CVE-2026-69454
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Azure Attestation service and Device Health Attestation Service
MSRC Security Blog
SEVERE
CVE-2026-83511
Spoofing
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-83511
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-83522
Spoofing
Windows IKE Extension
NO AUTH NETWORK
Severe
CVE-2026-83522
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Windows IKE Extension
MSRC Security Blog
SEVERE
CVE-2026-83573
Privilege Escalation
Windows Kernel-Mode Driver
NO AUTH UNSPECIFIED
Severe
CVE-2026-83573
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Windows Kernel-Mode Driver
MSRC Security Blog
SEVERE
CVE-2026-83645
Denial of Service
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-83645
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-83647
Denial of Service
Windows Active Directory Domain Services
NO AUTH NETWORK
Severe
CVE-2026-83647
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Active Directory Domain Services
MSRC Security Blog
SEVERE
CVE-2026-83651
Information Disclosure
Windows GDI
NO AUTH NETWORK
Severe
CVE-2026-83651
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows GDI
MSRC Security Blog
SEVERE
CVE-2026-83665
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-83665
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-83670
Information Disclosure
Function Discovery Service (fdwsd.dll)
NO AUTH NETWORK
Severe
CVE-2026-83670
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Function Discovery Service (fdwsd.dll)
MSRC Security Blog
SEVERE
CVE-2026-83677
Denial of Service
Windows DHCP Client
NO AUTH NETWORK
Severe
CVE-2026-83677
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Client
MSRC Security Blog
SEVERE
CVE-2026-83739
Remote Code Execution
Windows Bluetooth Service
NO AUTH ADJACENT
Severe
CVE-2026-83739
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector AdjacentAuth None requiredProduct Windows Bluetooth Service
MSRC Security Blog
SEVERE
CVE-2026-83771
Privilege Escalation
Windows Camera Frame Server Monitor
NO AUTH ADJACENT
Severe
CVE-2026-83771
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationVector AdjacentAuth None requiredProduct Windows Camera Frame Server Monitor
MSRC Security Blog
SEVERE
CVE-2026-83777
Privilege Escalation
Windows Bluetooth Service
NO AUTH ADJACENT
Severe
CVE-2026-83777
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationVector AdjacentAuth None requiredProduct Windows Bluetooth Service
MSRC Security Blog
SEVERE
CVE-2026-83795
Denial of Service
Windows Internet Key Exchange (IKE) Extensio
NO AUTH NETWORK
Severe
CVE-2026-83795
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Internet Key Exchange (IKE) Extension
MSRC Security Blog
SEVERE
CVE-2026-83860
Denial of Service
Windows GDI
NO AUTH NETWORK
Severe
CVE-2026-83860
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows GDI
MSRC Security Blog
SEVERE
CVE-2026-83895
Privilege Escalation
Windows Win32 Kernel Subsystem
NO AUTH UNSPECIFIED
Severe
CVE-2026-83895
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Windows Win32 Kernel Subsystem
MSRC Security Blog
SEVERE
CVE-2026-83889
Remote Code Execution
Windows DNS Server
NETWORK
Severe
CVE-2026-83889
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows DNS Server
MSRC Security Blog
SEVERE
CVE-2026-69789
Remote Code Execution
Windows Reliable Multicast Transport Driver
NO AUTH ADJACENT
Severe
CVE-2026-69789
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector AdjacentAuth None requiredProduct Windows Reliable Multicast Transport Driver (RMCAST)
MSRC Security Blog
SEVERE
CVE-2026-87705
Security Bypass
Windows Hyper-V
NO AUTH ADJACENT
Severe
CVE-2026-87705
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector AdjacentAuth None requiredProduct Windows Hyper-V
MSRC Security Blog
SEVERE
CVE-2026-85922
Security Bypass
Azure Key Vault
NO AUTH NETWORK
Severe
CVE-2026-85922
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Azure Key Vault
MSRC Security Blog
SEVERE
CVE-2026-85925
Privilege Escalation
Azure Key Vault Client SDK
NETWORK
Severe
CVE-2026-85925
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Azure Key Vault Client SDK
MSRC Security Blog
SEVERE
CVE-2026-70250
Remote Code Execution
Windows DHCP Client
NO AUTH ADJACENT
Severe
CVE-2026-70250
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector AdjacentAuth None requiredProduct Windows DHCP Client
MSRC Security Blog
SEVERE
CVE-2026-70279
Spoofing
Microsoft Exchange Server
NO AUTH NETWORK
Severe
CVE-2026-70279
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Microsoft Exchange Server
MSRC Security Blog
SEVERE
CVE-2026-70297
Remote Code Execution
Skype for Business
NETWORK
Severe
CVE-2026-70297
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Skype for Business
MSRC Security Blog
SEVERE
CVE-2026-77910
Privilege Escalation
Microsoft Exchange Server
NETWORK
Severe
CVE-2026-77910
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Exchange Server
MSRC Security Blog
SEVERE
CVE-2026-83746
Privilege Escalation
Skype for Business
NETWORK
Severe
CVE-2026-83746
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Skype for Business
MSRC Security Blog
SEVERE
CVE-2026-85873
Privilege Escalation
Skype for Business
NETWORK
Severe
CVE-2026-85873
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Skype for Business
MSRC Security Blog
SEVERE
CVE-2026-87696
Privilege Escalation
Microsoft Exchange Server
NETWORK
Severe
CVE-2026-87696
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Exchange Server
MSRC Security Blog
SEVERE
CVE-2026-88075
Privilege Escalation
Configuration Manager
NETWORK
Severe
CVE-2026-88075
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Configuration Manager
MSRC Security Blog
SEVERE
CVE-2026-88092
Spoofing
ASP.NET Core
NO AUTH NETWORK
Severe
CVE-2026-88092
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct ASP.NET Core
MSRC Security Blog
SEVERE
CVE-2026-70202
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-70202
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-70219
Information Disclosure
Microsoft Office Excel
NO AUTH NETWORK
Severe
CVE-2026-70219
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Excel
MSRC Security Blog
SEVERE
CVE-2026-70246
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-70246
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-88163
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-88163
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-88154
Information Disclosure
Microsoft Office Excel
NO AUTH NETWORK
Severe
CVE-2026-88154
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Excel
MSRC Security Blog
SEVERE
CVE-2026-88164
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-88164
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-88172
Information Disclosure
Microsoft Office Excel
NO AUTH NETWORK
Severe
CVE-2026-88172
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Excel
MSRC Security Blog
SEVERE
CVE-2026-88166
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-88166
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-88200
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-88200
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-88190
Information Disclosure
Microsoft Office Excel
NO AUTH NETWORK
Severe
CVE-2026-88190
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Excel
MSRC Security Blog
SEVERE
CVE-2026-88195
Information Disclosure
Microsoft Office Excel
NO AUTH NETWORK
Severe
CVE-2026-88195
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Excel
MSRC Security Blog
SEVERE
CVE-2026-88203
Information Disclosure
Microsoft Office PowerPoint
NO AUTH NETWORK
Severe
CVE-2026-88203
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office PowerPoint
MSRC Security Blog
SEVERE
CVE-2026-88206
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-88206
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-94512
Remote Code Execution
SQL Server
NETWORK
Severe
CVE-2026-94512
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct SQL Server
MSRC Security Blog
SEVERE
CVE-2026-96229
Information Disclosure
.NET
NO AUTH NETWORK
Severe
CVE-2026-96229
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct .NET
MSRC Security Blog
SEVERE
CVE-2026-96252
Spoofing
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-96252
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-96300
Denial of Service
RPC Endpoint Mapper Service
NO AUTH NETWORK
Severe
CVE-2026-96300
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct RPC Endpoint Mapper Service
MSRC Security Blog
SEVERE
CVE-2026-96325
Denial of Service
Windows SMB Server
NO AUTH NETWORK
Severe
CVE-2026-96325
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows SMB Server
MSRC Security Blog
SEVERE
CVE-2026-88094
Privilege Escalation
Azure Storage Library
NETWORK
Severe
CVE-2026-88094
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Azure Storage Library
MSRC Security Blog
SEVERE
CVE-2026-96945
Denial of Service
Windows Failover Cluster
NO AUTH NETWORK
Severe
CVE-2026-96945
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Failover Cluster
MSRC Security Blog
SEVERE
CVE-2026-96960
Denial of Service
.NET
NO AUTH NETWORK
Severe
CVE-2026-96960
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct .NET
MSRC Security Blog
SEVERE
CVE-2026-97788
Information Disclosure
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-97788
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-100214
Remote Code Execution
Microsoft Dynamics 365 Business Central
NETWORK
Severe
CVE-2026-100214
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Dynamics 365 Business Central
MSRC Security Blog
SEVERE
CVE-2026-102192
Denial of Service
Windows Failover Cluster
NO AUTH NETWORK
Severe
CVE-2026-102192
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Failover Cluster
MSRC Security Blog
SEVERE
CVE-2026-102199
Denial of Service
Microsoft Windows Codecs Library
NO AUTH NETWORK
Severe
CVE-2026-102199
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Microsoft Windows Codecs Library
MSRC Security Blog
SEVERE
CVE-2026-102206
Privilege Escalation
Windows Portable Device MTP Driver
NO AUTH UNSPECIFIED
Severe
CVE-2026-102206
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Windows Portable Device MTP Driver
MSRC Security Blog
SEVERE
CVE-2026-102217
Privilege Escalation
WebDAV
NETWORK
Severe
CVE-2026-102217
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct WebDAV
MSRC Security Blog
SEVERE
CVE-2026-100215
Remote Code Execution
Microsoft Graphics Component
NO AUTH LOCAL
Severe
CVE-2026-100215
20d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector LocalAuth None requiredProduct Microsoft Graphics Component
MSRC Security Blog
SEVERE
CVE-2026-102226
Privilege Escalation
Dynamics Business Central
NETWORK
Severe
CVE-2026-102226
20d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Dynamics Business Central
MSRC Security Blog
SEVERE
CVE-2026-69922
Information Disclosure
Microsoft Office Excel
NO AUTH NETWORK
Severe
CVE-2026-69922
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Excel
MSRC Security Blog
SEVERE
CVE-2026-103558
Denial of Service
Windows Routing and Remote Access Service (R
NO AUTH NETWORK
Severe
CVE-2026-103558
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Routing and Remote Access Service (RRAS)
MSRC Security Blog
SEVERE
CVE-2026-103569
Information Disclosure
Windows IKE Extension
NO AUTH NETWORK
Severe
CVE-2026-103569
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows IKE Extension
MSRC Security Blog
SEVERE
CVE-2026-103576
Spoofing
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-103576
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-103577
Security Bypass
Microsoft QUIC
NO AUTH NETWORK
Severe
CVE-2026-103577
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Microsoft QUIC
MSRC Security Blog
SEVERE
CVE-2026-103578
Privilege Escalation
Windows Kernel
NO AUTH UNSPECIFIED
Severe
CVE-2026-103578
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Windows Kernel
MSRC Security Blog
SEVERE
CVE-2026-105006
Privilege Escalation
HID Class Driver
NO AUTH UNSPECIFIED
Severe
CVE-2026-105006
20d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct HID Class Driver
MSRC Security Blog
SEVERE
CVE-2026-105013
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-105013
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-97830
Denial of Service
Windows Internet Information Services
NO AUTH NETWORK
Severe
CVE-2026-97830
20d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Internet Information Services
MSRC Security Blog
SEVERE
CVE-2026-108463
Security Bypass
Windows SmartScreen
NO AUTH NETWORK
Severe
CVE-2026-108463
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Windows SmartScreen
MSRC Security Blog
SEVERE
CVE-2026-97801
Spoofing
.NET Framework
NO AUTH NETWORK
Severe
CVE-2026-97801
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct .NET Framework
MSRC Security Blog
SEVERE
CVE-2026-69435
Privilege Escalation
Azure SRE Agent
NETWORK
Severe
CVE-2026-69435
25d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Azure SRE Agent
MSRC Security Blog
SEVERE
CVE-2026-77900
Remote Code Execution
Azure App Service
NO AUTH NETWORK
Severe
CVE-2026-77900
was critical · 17bd
25d
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 17 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Azure App Service
MSRC Security Blog
SEVERE
CVE-2026-88131
Remote Code Execution
Microsoft Dataverse
NO AUTH NETWORK
Severe
CVE-2026-88131
was critical · 17bd
25d
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 17 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Dataverse
MSRC Security Blog
SEVERE
CVE-2026-94510
Privilege Escalation
Microsoft Bookings
NO AUTH NETWORK
Severe
CVE-2026-94510
was critical · 17bd
25d
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 17 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Microsoft Bookings
MSRC Security Blog
SEVERE
CVE-2026-96207
Privilege Escalation
Microsoft Partner Center
NO AUTH NETWORK
Severe
CVE-2026-96207
was critical · 17bd
25d
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 17 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Microsoft Partner Center
MSRC Security Blog
MODERATE
CVE-2026-58882
Denial of Service
NETWORK
Moderate
CVE-2026-58882
2d
Limited impact or meaningful preconditions.
Impact Denial of ServiceVector Network
BleepingComputer
MODERATE
ADVISORY
Vulnerability
NO AUTH NETWORK
Moderate
2d
Limited impact or meaningful preconditions.
Vector NetworkAuth None required
BleepingComputer
MODERATE
ADVISORY
Remote Code Execution
UNSPECIFIED
Moderate
3d
Limited impact or meaningful preconditions.
Impact Remote Code Execution
The Hacker News
MODERATE
CVE-2026-70125
Remote Code Execution
Microsoft Office Outlook
UNSPECIFIED
Moderate
CVE-2026-70125
3d
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Office Outlook
MSRC Security Blog
MODERATE
CVE-2026-69446
Privilege Escalation
Microsoft Edge (Chromium-based)
UNSPECIFIED
Moderate
CVE-2026-69446
3d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
MODERATE
ADVISORY
Privilege Escalation
UNSPECIFIED
Moderate
5d
Limited impact or meaningful preconditions.
Impact Privilege Escalation
The Hacker News
MODERATE
CVE-2026-62877
Privilege Escalation
Windows Win32k
UNSPECIFIED
Moderate
CVE-2026-62877
5d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows Win32k
MSRC Security Blog
MODERATE
CVE-2026-70161
Privilege Escalation
.NET
UNSPECIFIED
Moderate
CVE-2026-70161
6d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct .NET
MSRC Security Blog
MODERATE
CVE-2026-70007
Remote Code Execution
.NET Framework
UNSPECIFIED
Moderate
CVE-2026-70007
6d
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct .NET Framework
MSRC Security Blog
MODERATE
CVE-2026-96225
Privilege Escalation
.NET
UNSPECIFIED
Moderate
CVE-2026-96225
6d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct .NET
MSRC Security Blog
MODERATE
CVE-2026-69473
Privilege Escalation
Windows Kernel
UNSPECIFIED
Moderate
CVE-2026-69473
6d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows Kernel
MSRC Security Blog
MODERATE
CVE-2026-69284
Privilege Escalation
Windows DCOM Server
UNSPECIFIED
Moderate
CVE-2026-69284
6d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows DCOM Server
MSRC Security Blog
MODERATE
CVE-2026-83519
Remote Code Execution
Windows Error Reporting
UNSPECIFIED
Moderate
CVE-2026-83519
7d
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Windows Error Reporting
MSRC Security Blog
MODERATE
CVE-2026-70054
Privilege Escalation
Windows NetBIOS
UNSPECIFIED
Moderate
CVE-2026-70054
7d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows NetBIOS
MSRC Security Blog
MODERATE
CVE-2026-69923
Privilege Escalation
Windows AI
UNSPECIFIED
Moderate
CVE-2026-69923
7d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows AI
MSRC Security Blog
MODERATE
CVE-2026-69926
Privilege Escalation
Desktop Window Manager
UNSPECIFIED
Moderate
CVE-2026-69926
7d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Desktop Window Manager
MSRC Security Blog
MODERATE
CVE-2026-70197
Remote Code Execution
.NET and Visual Studio
UNSPECIFIED
Moderate
CVE-2026-70197
8d
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct .NET and Visual Studio
MSRC Security Blog
MODERATE
CVE-2026-102870
Remote Code Execution
ASP.NET Core
UNSPECIFIED
Moderate
CVE-2026-102870
8d
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct ASP.NET Core
MSRC Security Blog
MODERATE
CVE-2026-114148
Privilege Escalation
ASP.NET Core
LOCAL
Moderate
CVE-2026-114148
8d
Requires local access, which limits who can reach it.
Impact Privilege EscalationVector LocalAuth Credentials requiredProduct ASP.NET Core
MSRC Security Blog
MODERATE
CVE-2026-83862
Remote Code Execution
Windows Network Load Balancing
UNSPECIFIED
Moderate
CVE-2026-83862
10d
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Windows Network Load Balancing
MSRC Security Blog
MODERATE
CVE-2026-102208
Privilege Escalation
Windows Win32 Kernel Subsystem
UNSPECIFIED
Moderate
CVE-2026-102208
10d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows Win32 Kernel Subsystem
MSRC Security Blog
MODERATE
CVE-2026-96251
Remote Code Execution
Microsoft PowerShell
UNSPECIFIED
Moderate
CVE-2026-96251
11d
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft PowerShell
MSRC Security Blog
MODERATE
CVE-2026-61359
Privilege Escalation
Windows Storage
UNSPECIFIED
Moderate
CVE-2026-61359
12d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows Storage
MSRC Security Blog
MODERATE
CVE-2026-83709
Privilege Escalation
Windows NTLM
UNSPECIFIED
Moderate
CVE-2026-83709
12d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows NTLM
MSRC Security Blog
MODERATE
CVE-2026-69902
Remote Code Execution
Windows NTFS
UNSPECIFIED
Moderate
CVE-2026-69902
12d
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Windows NTFS
MSRC Security Blog
MODERATE
CVE-2026-85868
Privilege Escalation
Windows Common Log File System Driver
UNSPECIFIED
Moderate
CVE-2026-85868
12d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows Common Log File System Driver
MSRC Security Blog
MODERATE
CVE-2026-96913
Privilege Escalation
Windows Kernel
UNSPECIFIED
Moderate
CVE-2026-96913
13d
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows Kernel
MSRC Security Blog
Nothing matches those filters.
