EMERGENCY
CVE-2026-62721
Vulnerability
UNSPECIFIED
Emergency
CVE-2026-62721
2d
Shipped as an out-of-band emergency fix, outside the normal patch cycle.
Vendor advisory not machine-readable — grade is from reported exploitation.
TechPowerUp
CRITICAL
CVE-2026-85880
Privilege Escalation
Windows Advanced Local Procedure Call (ALPC)
EXPLOITED UNSPECIFIED
Critical
CVE-2026-85880
Exploited in the wild
1d
Listed in CISA's Known Exploited Vulnerabilities catalog — attackers are already using it.
Impact Privilege EscalationProduct Windows Advanced Local Procedure Call (ALPC)
MSRC Security Blog
CRITICAL
CVE-2026-69486
Remote Code Execution
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-69486
2d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
CRITICAL
CVE-2026-81963
Privilege Escalation
Windows Update Stack
EXPLOITED UNSPECIFIED
Critical
CVE-2026-81963
Exploited in the wild
2d
Listed in CISA's Known Exploited Vulnerabilities catalog — attackers are already using it.
Impact Privilege EscalationProduct Windows Update Stack
MSRC Security Blog
CRITICAL
CVE-2026-85893
Privilege Escalation
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-85893
2d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
CRITICAL
CVE-2026-87491
Vulnerability
EXPLOITED UNSPECIFIED
Critical
CVE-2026-87491
Exploited in the wild
6d
Listed in CISA's Known Exploited Vulnerabilities catalog — attackers are already using it.
Vendor advisory not machine-readable — grade is from reported exploitation.
MSRC Security Blog
CRITICAL
CVE-2026-85046
Vulnerability
Chromium V8
EXPLOITED UNSPECIFIED
Critical
CVE-2026-85046
Exploited in the wild
8d
Listed in CISA's Known Exploited Vulnerabilities catalog — attackers are already using it.
Product Chromium V8
MSRC Security Blog
CRITICAL
CVE-2026-62706
Remote Code Execution
Microsoft Windows Media Foundation
NO AUTH NETWORK
Critical
CVE-2026-62706
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
MSRC Security Blog
CRITICAL
CVE-2026-62744
Remote Code Execution
Microsoft Windows Media Foundation
NO AUTH NETWORK
Critical
CVE-2026-62744
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
MSRC Security Blog
CRITICAL
CVE-2026-66302
Remote Code Execution
Skype for Business
NO AUTH NETWORK
Critical
CVE-2026-66302
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Skype for Business
MSRC Security Blog
CRITICAL
CVE-2026-62895
Privilege Escalation
Azure Arc SQL Server Extension
NO AUTH NETWORK
Critical
CVE-2026-62895
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Azure Arc SQL Server Extension
MSRC Security Blog
CRITICAL
CVE-2026-69522
Remote Code Execution
.NET and Visual Studio
NO AUTH NETWORK
Critical
CVE-2026-69522
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct .NET and Visual Studio
MSRC Security Blog
CRITICAL
CVE-2026-69782
Remote Code Execution
Windows DNS Server
NO AUTH NETWORK
Critical
CVE-2026-69782
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DNS Server
MSRC Security Blog
CRITICAL
CVE-2026-62916
Privilege Escalation
Microsoft Entra ID
NO AUTH NETWORK
Critical
CVE-2026-62916
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Microsoft Entra ID
MSRC Security Blog
CRITICAL
CVE-2026-77482
Remote Code Execution
Microsoft SQL Server
NO AUTH NETWORK
Critical
CVE-2026-77482
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft SQL Server
MSRC Security Blog
CRITICAL
CVE-2026-55007
Remote Code Execution
Microsoft Exchange Server
NO AUTH NETWORK
Critical
CVE-2026-55007
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Exchange Server
MSRC Security Blog
CRITICAL
CVE-2026-69276
Remote Code Execution
Microsoft UxTheme Library (uxtheme.dll)
NO AUTH NETWORK
Critical
CVE-2026-69276
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft UxTheme Library (uxtheme.dll)
MSRC Security Blog
CRITICAL
CVE-2026-69325
Remote Code Execution
Microsoft JScript
NO AUTH NETWORK
Critical
CVE-2026-69325
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft JScript
MSRC Security Blog
CRITICAL
CVE-2026-69408
Remote Code Execution
Microsoft Windows Media Foundation
NO AUTH NETWORK
Critical
CVE-2026-69408
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
MSRC Security Blog
CRITICAL
CVE-2026-69431
Remote Code Execution
Telnet Client
NO AUTH NETWORK
Critical
CVE-2026-69431
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Telnet Client
MSRC Security Blog
CRITICAL
CVE-2026-69491
Remote Code Execution
Microsoft DirectMusic
NO AUTH NETWORK
Critical
CVE-2026-69491
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft DirectMusic
MSRC Security Blog
CRITICAL
CVE-2026-69463
Remote Code Execution
Windows NTFS
NO AUTH NETWORK
Critical
CVE-2026-69463
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows NTFS
MSRC Security Blog
CRITICAL
CVE-2026-69494
Remote Code Execution
Windows Event Logging Service
NO AUTH NETWORK
Critical
CVE-2026-69494
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Event Logging Service
MSRC Security Blog
CRITICAL
CVE-2026-69495
Remote Code Execution
Windows Event Logging Service
NO AUTH NETWORK
Critical
CVE-2026-69495
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Event Logging Service
MSRC Security Blog
CRITICAL
CVE-2026-69496
Remote Code Execution
Windows Compressed Folder
NO AUTH NETWORK
Critical
CVE-2026-69496
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Compressed Folder
MSRC Security Blog
CRITICAL
CVE-2026-69525
Remote Code Execution
Remote Desktop Services
NO AUTH NETWORK
Critical
CVE-2026-69525
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Services
MSRC Security Blog
CRITICAL
CVE-2026-69524
Remote Code Execution
Windows Active Directory Domain Services
NO AUTH NETWORK
Critical
CVE-2026-69524
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Active Directory Domain Services
MSRC Security Blog
CRITICAL
CVE-2026-69819
Remote Code Execution
RPC Runtime Library
NO AUTH NETWORK
Critical
CVE-2026-69819
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct RPC Runtime Library
MSRC Security Blog
CRITICAL
CVE-2026-69772
Remote Code Execution
Windows Network File System
NO AUTH NETWORK
Critical
CVE-2026-69772
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Network File System
MSRC Security Blog
CRITICAL
CVE-2026-69730
Remote Code Execution
Windows DNS Server
NO AUTH NETWORK
Critical
CVE-2026-69730
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DNS Server
MSRC Security Blog
CRITICAL
CVE-2026-70342
Privilege Escalation
Windows Ancillary Function Driver for WinSoc
NO AUTH NETWORK
Critical
CVE-2026-70342
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows Ancillary Function Driver for WinSock
MSRC Security Blog
CRITICAL
CVE-2026-70351
Remote Code Execution
Microsoft WebP Image Extension
NO AUTH NETWORK
Critical
CVE-2026-70351
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft WebP Image Extension
MSRC Security Blog
CRITICAL
CVE-2026-70586
Remote Code Execution
Windows Paint
NO AUTH NETWORK
Critical
CVE-2026-70586
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Paint
MSRC Security Blog
CRITICAL
CVE-2026-69518
Remote Code Execution
Windows Remote Desktop
NO AUTH NETWORK
Critical
CVE-2026-69518
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Remote Desktop
MSRC Security Blog
CRITICAL
CVE-2026-69556
Remote Code Execution
Microsoft Office Word
NO AUTH NETWORK
Critical
CVE-2026-69556
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Word
MSRC Security Blog
CRITICAL
CVE-2026-69649
Remote Code Execution
Raw Image Extension
NO AUTH NETWORK
Critical
CVE-2026-69649
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Raw Image Extension
MSRC Security Blog
CRITICAL
CVE-2026-69742
Remote Code Execution
Microsoft Office Publisher
NO AUTH NETWORK
Critical
CVE-2026-69742
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Publisher
MSRC Security Blog
CRITICAL
CVE-2026-69529
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-69529
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-69764
Remote Code Execution
Microsoft Office Word
NO AUTH NETWORK
Critical
CVE-2026-69764
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Word
MSRC Security Blog
CRITICAL
CVE-2026-69778
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-69778
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-77495
Remote Code Execution
Windows Imaging Component
NO AUTH NETWORK
Critical
CVE-2026-77495
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Imaging Component
MSRC Security Blog
CRITICAL
CVE-2026-72979
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-72979
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-72981
Remote Code Execution
IP Helper
NO AUTH NETWORK
Critical
CVE-2026-72981
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct IP Helper
MSRC Security Blog
CRITICAL
CVE-2026-72983
Remote Code Execution
Internet Connection Sharing (ICS)
NO AUTH NETWORK
Critical
CVE-2026-72983
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Internet Connection Sharing (ICS)
MSRC Security Blog
CRITICAL
CVE-2026-72982
Remote Code Execution
Windows Netlogon
NO AUTH NETWORK
Critical
CVE-2026-72982
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Netlogon
MSRC Security Blog
CRITICAL
CVE-2026-72986
Remote Code Execution
Graphic Fonts
NO AUTH NETWORK
Critical
CVE-2026-72986
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Graphic Fonts
MSRC Security Blog
CRITICAL
CVE-2026-69579
Remote Code Execution
Windows Message Queuing
NO AUTH NETWORK
Critical
CVE-2026-69579
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Message Queuing
MSRC Security Blog
CRITICAL
CVE-2026-77493
Remote Code Execution
Windows Graphics Component
NO AUTH NETWORK
Critical
CVE-2026-77493
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Graphics Component
MSRC Security Blog
CRITICAL
CVE-2026-77504
Remote Code Execution
Microsoft Office Word
NO AUTH NETWORK
Critical
CVE-2026-77504
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Word
MSRC Security Blog
CRITICAL
CVE-2026-77505
Remote Code Execution
Windows DNS Server
NO AUTH NETWORK
Critical
CVE-2026-77505
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DNS Server
MSRC Security Blog
CRITICAL
CVE-2026-69285
Remote Code Execution
Microsoft Office
NO AUTH NETWORK
Critical
CVE-2026-69285
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office
MSRC Security Blog
CRITICAL
CVE-2026-77907
Remote Code Execution
Visual Studio
NO AUTH NETWORK
Critical
CVE-2026-77907
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Visual Studio
MSRC Security Blog
CRITICAL
CVE-2026-78463
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-78463
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-65669
Privilege Escalation
Microsoft SQL Server
NO AUTH NETWORK
Critical
CVE-2026-65669
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Microsoft SQL Server
MSRC Security Blog
CRITICAL
CVE-2026-80074
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-80074
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-80077
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-80077
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-69989
Remote Code Execution
Windows DNS Server
NO AUTH NETWORK
Critical
CVE-2026-69989
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DNS Server
MSRC Security Blog
CRITICAL
CVE-2026-69827
Remote Code Execution
Windows DNS Server
NO AUTH NETWORK
Critical
CVE-2026-69827
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DNS Server
MSRC Security Blog
CRITICAL
CVE-2026-72940
Remote Code Execution
Windows Schannel
NO AUTH NETWORK
Critical
CVE-2026-72940
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Schannel
MSRC Security Blog
CRITICAL
CVE-2026-83998
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-83998
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-85877
Remote Code Execution
Windows Print Spooler
NO AUTH NETWORK
Critical
CVE-2026-85877
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Print Spooler
MSRC Security Blog
CRITICAL
CVE-2026-68828
Remote Code Execution
Remote Desktop Client
NO AUTH NETWORK
Critical
CVE-2026-68828
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Remote Desktop Client
MSRC Security Blog
CRITICAL
CVE-2026-68839
Remote Code Execution
Windows USB Mass Storage Class Driver
NO AUTH NETWORK
Critical
CVE-2026-68839
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows USB Mass Storage Class Driver
MSRC Security Blog
CRITICAL
CVE-2026-69266
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-69266
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-69360
Remote Code Execution
Microsoft Office Word
NO AUTH NETWORK
Critical
CVE-2026-69360
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Word
MSRC Security Blog
CRITICAL
CVE-2026-69386
Remote Code Execution
Microsoft Windows Media Foundation
NO AUTH NETWORK
Critical
CVE-2026-69386
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
MSRC Security Blog
CRITICAL
CVE-2026-69438
Remote Code Execution
Microsoft JScript
NO AUTH NETWORK
Critical
CVE-2026-69438
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft JScript
MSRC Security Blog
CRITICAL
CVE-2026-69434
Remote Code Execution
Windows URL Moniker
NO AUTH NETWORK
Critical
CVE-2026-69434
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows URL Moniker
MSRC Security Blog
CRITICAL
CVE-2026-69493
Remote Code Execution
Windows Event Logging Service
NO AUTH NETWORK
Critical
CVE-2026-69493
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Event Logging Service
MSRC Security Blog
CRITICAL
CVE-2026-69511
Remote Code Execution
Microsoft Windows Media Foundation
NO AUTH NETWORK
Critical
CVE-2026-69511
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
MSRC Security Blog
CRITICAL
CVE-2026-69546
Remote Code Execution
Windows Active Directory Domain Services
NO AUTH NETWORK
Critical
CVE-2026-69546
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Active Directory Domain Services
MSRC Security Blog
CRITICAL
CVE-2026-69586
Remote Code Execution
Microsoft Windows PDF
NO AUTH NETWORK
Critical
CVE-2026-69586
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows PDF
MSRC Security Blog
CRITICAL
CVE-2026-69669
Remote Code Execution
Windows Kernel
NO AUTH NETWORK
Critical
CVE-2026-69669
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Kernel
MSRC Security Blog
CRITICAL
CVE-2026-69620
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-69620
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-69715
Remote Code Execution
Windows Direct Show
NO AUTH NETWORK
Critical
CVE-2026-69715
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Direct Show
MSRC Security Blog
CRITICAL
CVE-2026-69768
Remote Code Execution
Windows RNDIS
NO AUTH NETWORK
Critical
CVE-2026-69768
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows RNDIS
MSRC Security Blog
CRITICAL
CVE-2026-69824
Remote Code Execution
Microsoft Standard XPS
NO AUTH NETWORK
Critical
CVE-2026-69824
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Standard XPS
MSRC Security Blog
CRITICAL
CVE-2026-69829
Remote Code Execution
Windows Shell
NO AUTH NETWORK
Critical
CVE-2026-69829
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Shell
MSRC Security Blog
CRITICAL
CVE-2026-69769
Remote Code Execution
Windows HTTP Print Provider
NO AUTH NETWORK
Critical
CVE-2026-69769
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows HTTP Print Provider
MSRC Security Blog
CRITICAL
CVE-2026-69786
Remote Code Execution
Windows Text Shaping
NO AUTH NETWORK
Critical
CVE-2026-69786
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Text Shaping
MSRC Security Blog
CRITICAL
CVE-2026-69813
Remote Code Execution
Windows DNS Server
NO AUTH NETWORK
Critical
CVE-2026-69813
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DNS Server
MSRC Security Blog
CRITICAL
CVE-2026-69858
Remote Code Execution
Windows DNS Server
NO AUTH NETWORK
Critical
CVE-2026-69858
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DNS Server
MSRC Security Blog
CRITICAL
CVE-2026-47297
Remote Code Execution
Microsoft SQL Server
NO AUTH NETWORK
Critical
CVE-2026-47297
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft SQL Server
MSRC Security Blog
CRITICAL
CVE-2026-72936
Remote Code Execution
Windows SMB Client
NO AUTH NETWORK
Critical
CVE-2026-72936
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows SMB Client
MSRC Security Blog
CRITICAL
CVE-2026-72933
Remote Code Execution
Microsoft WDAC OLE DB provider for SQL
NO AUTH NETWORK
Critical
CVE-2026-72933
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft WDAC OLE DB provider for SQL
MSRC Security Blog
CRITICAL
CVE-2026-72960
Remote Code Execution
Windows Media Player
NO AUTH NETWORK
Critical
CVE-2026-72960
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Media Player
MSRC Security Blog
CRITICAL
CVE-2026-69291
Remote Code Execution
Windows Volume Manager Extension Driver
NO AUTH NETWORK
Critical
CVE-2026-69291
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Volume Manager Extension Driver
MSRC Security Blog
CRITICAL
CVE-2026-69910
Remote Code Execution
Windows Hyper-V
NO AUTH NETWORK
Critical
CVE-2026-69910
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Hyper-V
MSRC Security Blog
CRITICAL
CVE-2026-69397
Remote Code Execution
Microsoft OpenSSH for Windows
NO AUTH NETWORK
Critical
CVE-2026-69397
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft OpenSSH for Windows
MSRC Security Blog
CRITICAL
CVE-2026-69499
Remote Code Execution
Windows Imaging Component
NO AUTH NETWORK
Critical
CVE-2026-69499
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Imaging Component
MSRC Security Blog
CRITICAL
CVE-2026-69510
Remote Code Execution
Windows DHCP Server
NO AUTH NETWORK
Critical
CVE-2026-69510
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
CRITICAL
CVE-2026-69607
Remote Code Execution
Windows Deployment Services
NO AUTH NETWORK
Critical
CVE-2026-69607
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Deployment Services
MSRC Security Blog
CRITICAL
CVE-2026-69601
Remote Code Execution
Microsoft Windows Media Foundation
NO AUTH NETWORK
Critical
CVE-2026-69601
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
MSRC Security Blog
CRITICAL
CVE-2026-69442
Remote Code Execution
Microsoft Office
NO AUTH NETWORK
Critical
CVE-2026-69442
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office
MSRC Security Blog
CRITICAL
CVE-2026-69614
Remote Code Execution
Microsoft Office Access
NO AUTH NETWORK
Critical
CVE-2026-69614
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
MSRC Security Blog
CRITICAL
CVE-2026-69629
Remote Code Execution
Microsoft Office Outlook
NO AUTH NETWORK
Critical
CVE-2026-69629
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
MSRC Security Blog
CRITICAL
CVE-2026-69439
Privilege Escalation
.NET and Visual Studio
NO AUTH NETWORK
Critical
CVE-2026-69439
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct .NET and Visual Studio
MSRC Security Blog
CRITICAL
CVE-2026-69805
Privilege Escalation
.NET
NO AUTH NETWORK
Critical
CVE-2026-69805
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct .NET
MSRC Security Blog
CRITICAL
CVE-2026-70203
Remote Code Execution
Windows Media Player
NO AUTH NETWORK
Critical
CVE-2026-70203
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Media Player
MSRC Security Blog
CRITICAL
CVE-2026-70296
Remote Code Execution
Windows Imaging Component
NO AUTH NETWORK
Critical
CVE-2026-70296
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Imaging Component
MSRC Security Blog
CRITICAL
CVE-2026-72987
Remote Code Execution
Windows DNS
NO AUTH NETWORK
Critical
CVE-2026-72987
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DNS
MSRC Security Blog
CRITICAL
CVE-2026-73018
Remote Code Execution
Graphic Fonts
NO AUTH NETWORK
Critical
CVE-2026-73018
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Graphic Fonts
MSRC Security Blog
CRITICAL
CVE-2026-73009
Remote Code Execution
Windows Secure Socket Tunneling Protocol (SS
NO AUTH NETWORK
Critical
CVE-2026-73009
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Secure Socket Tunneling Protocol (SSTP)
MSRC Security Blog
CRITICAL
CVE-2026-73010
Remote Code Execution
Microsoft Failover Cluster
NO AUTH NETWORK
Critical
CVE-2026-73010
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Failover Cluster
MSRC Security Blog
CRITICAL
CVE-2026-73023
Remote Code Execution
Windows Imaging Component
NO AUTH NETWORK
Critical
CVE-2026-73023
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Imaging Component
MSRC Security Blog
CRITICAL
CVE-2026-73013
Remote Code Execution
Windows Imaging Component
NO AUTH NETWORK
Critical
CVE-2026-73013
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Imaging Component
MSRC Security Blog
CRITICAL
CVE-2026-71328
Remote Code Execution
.NET and Visual Studio
NO AUTH NETWORK
Critical
CVE-2026-71328
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct .NET and Visual Studio
MSRC Security Blog
CRITICAL
CVE-2026-77486
Remote Code Execution
Microsoft SQL Server
NO AUTH NETWORK
Critical
CVE-2026-77486
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft SQL Server
MSRC Security Blog
CRITICAL
CVE-2026-69854
Privilege Escalation
Spring Cloud Azure
NO AUTH NETWORK
Critical
CVE-2026-69854
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Spring Cloud Azure
MSRC Security Blog
CRITICAL
CVE-2026-78442
Remote Code Execution
Windows OLE DB
NO AUTH NETWORK
Critical
CVE-2026-78442
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows OLE DB
MSRC Security Blog
CRITICAL
CVE-2026-78445
Remote Code Execution
Windows Services for NFS ONCRPC XDR Driver
NO AUTH NETWORK
Critical
CVE-2026-78445
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Services for NFS ONCRPC XDR Driver
MSRC Security Blog
CRITICAL
CVE-2026-78449
Remote Code Execution
Windows Reliable Multicast Transport Driver
NO AUTH NETWORK
Critical
CVE-2026-78449
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Reliable Multicast Transport Driver (RMCAST)
MSRC Security Blog
CRITICAL
CVE-2026-78444
Remote Code Execution
Microsoft Failover Cluster
NO AUTH NETWORK
Critical
CVE-2026-78444
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Failover Cluster
MSRC Security Blog
CRITICAL
CVE-2026-78450
Remote Code Execution
Windows Reliable Multicast Transport Driver
NO AUTH NETWORK
Critical
CVE-2026-78450
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Reliable Multicast Transport Driver (RMCAST)
MSRC Security Blog
CRITICAL
CVE-2026-69595
Remote Code Execution
Windows Services for NFS ONCRPC XDR Driver
NO AUTH NETWORK
Critical
CVE-2026-69595
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Services for NFS ONCRPC XDR Driver
MSRC Security Blog
CRITICAL
CVE-2026-78519
Remote Code Execution
Microsoft Office Outlook
NO AUTH NETWORK
Critical
CVE-2026-78519
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
MSRC Security Blog
CRITICAL
CVE-2026-80081
Remote Code Execution
Microsoft Office PowerPoint
NO AUTH NETWORK
Critical
CVE-2026-80081
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office PowerPoint
MSRC Security Blog
CRITICAL
CVE-2026-81352
Remote Code Execution
Web Media Extensions
NO AUTH NETWORK
Critical
CVE-2026-81352
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Web Media Extensions
MSRC Security Blog
CRITICAL
CVE-2026-81385
Remote Code Execution
Microsoft Office Publisher
NO AUTH NETWORK
Critical
CVE-2026-81385
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Publisher
MSRC Security Blog
CRITICAL
CVE-2026-77906
Remote Code Execution
Visual Studio
NO AUTH NETWORK
Critical
CVE-2026-77906
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Visual Studio
MSRC Security Blog
CRITICAL
CVE-2026-69530
Remote Code Execution
Windows Reliable Multicast Transport Driver
NO AUTH NETWORK
Critical
CVE-2026-69530
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Reliable Multicast Transport Driver (RMCAST)
MSRC Security Blog
CRITICAL
CVE-2026-69598
Remote Code Execution
Windows iSCSI
NO AUTH NETWORK
Critical
CVE-2026-69598
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows iSCSI
MSRC Security Blog
CRITICAL
CVE-2026-83992
Remote Code Execution
Windows Imaging Component
NO AUTH NETWORK
Critical
CVE-2026-83992
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Imaging Component
MSRC Security Blog
CRITICAL
CVE-2026-83997
Remote Code Execution
Windows Message Queuing
NO AUTH NETWORK
Critical
CVE-2026-83997
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Message Queuing
MSRC Security Blog
CRITICAL
CVE-2026-70352
Privilege Escalation
Azure AI Language
NO AUTH NETWORK
Critical
CVE-2026-70352
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Azure AI Language
MSRC Security Blog
CRITICAL
CVE-2026-80098
Privilege Escalation
Copilot Studio
NO AUTH NETWORK
Critical
CVE-2026-80098
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Copilot Studio
MSRC Security Blog
CRITICAL
CVE-2026-83711
Privilege Escalation
Microsoft Azure Active Directory B2C
NO AUTH NETWORK
Critical
CVE-2026-83711
9d
Reachable over the network with no credentials, and leads to code execution.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Microsoft Azure Active Directory B2C
MSRC Security Blog
CRITICAL
CVE-2026-66323
Remote Code Execution
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-66323
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
CRITICAL
CVE-2026-66798
Remote Code Execution
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-66798
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
CRITICAL
CVE-2026-72984
Remote Code Execution
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Critical
CVE-2026-72984
20d
Reachable over the network with no credentials, and leads to code execution.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
SEVERE
ADVISORY
Remote Code Execution
NO AUTH UNSPECIFIED
Severe
2d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionAuth None required
The Hacker News
SEVERE
CVE-2026-77490
Spoofing
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Severe
CVE-2026-77490
6d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
SEVERE
CVE-2026-66304
Information Disclosure
Skype for Business
NO AUTH NETWORK
Severe
CVE-2026-66304
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Skype for Business
MSRC Security Blog
SEVERE
CVE-2026-66306
Information Disclosure
Skype for Business
NO AUTH NETWORK
Severe
CVE-2026-66306
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Skype for Business
MSRC Security Blog
SEVERE
CVE-2026-70091
Denial of Service
Windows DNS
NO AUTH NETWORK
Severe
CVE-2026-70091
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DNS
MSRC Security Blog
SEVERE
CVE-2026-65818
Privilege Escalation
Power Automate
NETWORK
Severe
CVE-2026-65818
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Power Automate
MSRC Security Blog
SEVERE
CVE-2026-70178
Privilege Escalation
Microsoft Fabric
NETWORK
Severe
CVE-2026-70178
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Fabric
MSRC Security Blog
SEVERE
CVE-2026-83941
Privilege Escalation
Entra ID
NETWORK
Severe
CVE-2026-83941
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Entra ID
MSRC Security Blog
SEVERE
CVE-2026-57098
Information Disclosure
Microsoft Remote Desktop App for Windows
NO AUTH NETWORK
Severe
CVE-2026-57098
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Remote Desktop App for Windows
MSRC Security Blog
SEVERE
CVE-2026-62801
Security Bypass
Microsoft PowerShell
NO AUTH NETWORK
Severe
CVE-2026-62801
9d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Microsoft PowerShell
MSRC Security Blog
SEVERE
CVE-2026-67368
Privilege Escalation
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67368
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67370
Privilege Escalation
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67370
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67373
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67373
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67631
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67631
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-68785
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-68785
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-68833
Remote Code Execution
Windows NTFS
NO AUTH UNSPECIFIED
Severe
CVE-2026-68833
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionAuth None requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-68835
Privilege Escalation
Windows Print Spooler Components
NETWORK
Severe
CVE-2026-68835
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Print Spooler Components
MSRC Security Blog
SEVERE
CVE-2026-68846
Privilege Escalation
Windows Kernel
NETWORK
Severe
CVE-2026-68846
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Kernel
MSRC Security Blog
SEVERE
CVE-2026-68878
Privilege Escalation
Windows Fast FAT Driver
NETWORK
Severe
CVE-2026-68878
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Fast FAT Driver
MSRC Security Blog
SEVERE
CVE-2026-69271
Privilege Escalation
Microsoft Standard XPS
NETWORK
Severe
CVE-2026-69271
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Standard XPS
MSRC Security Blog
SEVERE
CVE-2026-68893
Privilege Escalation
Remote Desktop Licensing Service
NETWORK
Severe
CVE-2026-68893
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Remote Desktop Licensing Service
MSRC Security Blog
SEVERE
CVE-2026-69296
Privilege Escalation
Windows Device Association Service
NETWORK
Severe
CVE-2026-69296
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Device Association Service
MSRC Security Blog
SEVERE
CVE-2026-69336
Privilege Escalation
Microsoft Standard XPS
NETWORK
Severe
CVE-2026-69336
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Standard XPS
MSRC Security Blog
SEVERE
CVE-2026-69366
Privilege Escalation
Windows Kernel
NETWORK
Severe
CVE-2026-69366
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Kernel
MSRC Security Blog
SEVERE
CVE-2026-69337
Privilege Escalation
Windows Registry
NETWORK
Severe
CVE-2026-69337
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Registry
MSRC Security Blog
SEVERE
CVE-2026-69338
Privilege Escalation
Remote Desktop Gateway Service
NETWORK
Severe
CVE-2026-69338
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Remote Desktop Gateway Service
MSRC Security Blog
SEVERE
CVE-2026-69347
Remote Code Execution
Windows Fast FAT Driver
NO AUTH LOCAL
Severe
CVE-2026-69347
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector LocalAuth None requiredProduct Windows Fast FAT Driver
MSRC Security Blog
SEVERE
CVE-2026-69371
Privilege Escalation
Windows Overlay Filter
NETWORK
Severe
CVE-2026-69371
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Overlay Filter
MSRC Security Blog
SEVERE
CVE-2026-69418
Privilege Escalation
Volume Manager Driver
NETWORK
Severe
CVE-2026-69418
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Volume Manager Driver
MSRC Security Blog
SEVERE
CVE-2026-69415
Privilege Escalation
Windows DHCP Server
NETWORK
Severe
CVE-2026-69415
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-69423
Privilege Escalation
Windows USB Video Driver
NETWORK
Severe
CVE-2026-69423
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows USB Video Driver
MSRC Security Blog
SEVERE
CVE-2026-69429
Remote Code Execution
Windows Internet Key Exchange (IKE) Protocol
NETWORK
Severe
CVE-2026-69429
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Internet Key Exchange (IKE) Protocol Extensions
MSRC Security Blog
SEVERE
CVE-2026-69458
Privilege Escalation
Windows BitLocker
NETWORK
Severe
CVE-2026-69458
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows BitLocker
MSRC Security Blog
SEVERE
CVE-2026-69451
Privilege Escalation
Windows Management Instrumentation
NETWORK
Severe
CVE-2026-69451
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Management Instrumentation
MSRC Security Blog
SEVERE
CVE-2026-69485
Remote Code Execution
Remote Desktop Client
NETWORK
Severe
CVE-2026-69485
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Remote Desktop Client
MSRC Security Blog
SEVERE
CVE-2026-69479
Remote Code Execution
Windows NTFS
NO AUTH LOCAL
Severe
CVE-2026-69479
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector LocalAuth None requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-69481
Privilege Escalation
Windows Enterprise App Management
NETWORK
Severe
CVE-2026-69481
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Enterprise App Management
MSRC Security Blog
SEVERE
CVE-2026-69505
Privilege Escalation
Windows NTFS
NETWORK
Severe
CVE-2026-69505
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-69551
Remote Code Execution
Windows DNS Server
NETWORK
Severe
CVE-2026-69551
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows DNS Server
MSRC Security Blog
SEVERE
CVE-2026-69514
Remote Code Execution
Remote Desktop Services
NETWORK
Severe
CVE-2026-69514
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Remote Desktop Services
MSRC Security Blog
SEVERE
CVE-2026-69539
Remote Code Execution
Remote Desktop Services
NETWORK
Severe
CVE-2026-69539
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Remote Desktop Services
MSRC Security Blog
SEVERE
CVE-2026-69553
Privilege Escalation
Windows Hyper-V
NETWORK
Severe
CVE-2026-69553
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Hyper-V
MSRC Security Blog
SEVERE
CVE-2026-69588
Denial of Service
Windows TCP/IP
NO AUTH NETWORK
Severe
CVE-2026-69588
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows TCP/IP
MSRC Security Blog
SEVERE
CVE-2026-69587
Denial of Service
Windows Internet Key Exchange (IKE) Extensio
NO AUTH NETWORK
Severe
CVE-2026-69587
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Internet Key Exchange (IKE) Extension
MSRC Security Blog
SEVERE
CVE-2026-69623
Remote Code Execution
Windows HTTP Print Provider
NETWORK
Severe
CVE-2026-69623
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows HTTP Print Provider
MSRC Security Blog
SEVERE
CVE-2026-69689
Privilege Escalation
Windows Win32k
NETWORK
Severe
CVE-2026-69689
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Win32k
MSRC Security Blog
SEVERE
CVE-2026-69628
Remote Code Execution
Windows iSCSI
NETWORK
Severe
CVE-2026-69628
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows iSCSI
MSRC Security Blog
SEVERE
CVE-2026-69631
Denial of Service
Windows DNS
NO AUTH NETWORK
Severe
CVE-2026-69631
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DNS
MSRC Security Blog
SEVERE
CVE-2026-69638
Remote Code Execution
Windows NTFS
NO AUTH LOCAL
Severe
CVE-2026-69638
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector LocalAuth None requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-69729
Remote Code Execution
Windows Credential Providers
NETWORK
Severe
CVE-2026-69729
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Credential Providers
MSRC Security Blog
SEVERE
CVE-2026-69717
Privilege Escalation
Windows Group Policy
NETWORK
Severe
CVE-2026-69717
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Group Policy
MSRC Security Blog
SEVERE
CVE-2026-69875
Privilege Escalation
Windows NTFS
NETWORK
Severe
CVE-2026-69875
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-69757
Privilege Escalation
Windows TCP/IP
NETWORK
Severe
CVE-2026-69757
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows TCP/IP
MSRC Security Blog
SEVERE
CVE-2026-69681
Privilege Escalation
Virtual Hard Disk (VHD) Miniport Driver
NETWORK
Severe
CVE-2026-69681
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Virtual Hard Disk (VHD) Miniport Driver
MSRC Security Blog
SEVERE
CVE-2026-69762
Privilege Escalation
Windows Win32k
NETWORK
Severe
CVE-2026-69762
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Win32k
MSRC Security Blog
SEVERE
CVE-2026-69744
Denial of Service
Windows Kerberos
NO AUTH NETWORK
Severe
CVE-2026-69744
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Kerberos
MSRC Security Blog
SEVERE
CVE-2026-69775
Privilege Escalation
Windows DWM Core Library
NETWORK
Severe
CVE-2026-69775
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows DWM Core Library
MSRC Security Blog
SEVERE
CVE-2026-69712
Remote Code Execution
Windows Key Distribution Center
NETWORK
Severe
CVE-2026-69712
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Key Distribution Center
MSRC Security Blog
SEVERE
CVE-2026-69676
Remote Code Execution
Windows Kerberos
NETWORK
Severe
CVE-2026-69676
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Kerberos
MSRC Security Blog
SEVERE
CVE-2026-63523
Spoofing
Skype for Business
NO AUTH NETWORK
Severe
CVE-2026-63523
9d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Skype for Business
MSRC Security Blog
SEVERE
CVE-2026-58600
Privilege Escalation
HEVC Video Extensions
NO AUTH LOCAL
Severe
CVE-2026-58600
9d
Remotely reachable with meaningful impact.
Impact Privilege EscalationVector LocalAuth None requiredProduct HEVC Video Extensions
MSRC Security Blog
SEVERE
CVE-2026-70563
Spoofing
Windows Shell
NO AUTH NETWORK
Severe
CVE-2026-70563
9d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Windows Shell
MSRC Security Blog
SEVERE
CVE-2026-70587
Information Disclosure
Windows Remote Desktop Protocol
NO AUTH NETWORK
Severe
CVE-2026-70587
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Remote Desktop Protocol
MSRC Security Blog
SEVERE
CVE-2026-71329
Remote Code Execution
Windows NTFS
NO AUTH UNSPECIFIED
Severe
CVE-2026-71329
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionAuth None requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-71330
Information Disclosure
Windows Services for NFS ONCRPC XDR Driver
NO AUTH NETWORK
Severe
CVE-2026-71330
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Services for NFS ONCRPC XDR Driver
MSRC Security Blog
SEVERE
CVE-2026-71350
Remote Code Execution
Windows Spaceport.sys
NO AUTH UNSPECIFIED
Severe
CVE-2026-71350
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionAuth None requiredProduct Windows Spaceport.sys
MSRC Security Blog
SEVERE
CVE-2026-71348
Remote Code Execution
Windows Spaceport.sys
NO AUTH UNSPECIFIED
Severe
CVE-2026-71348
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionAuth None requiredProduct Windows Spaceport.sys
MSRC Security Blog
SEVERE
CVE-2026-72943
Remote Code Execution
Windows Deployment Services
NETWORK
Severe
CVE-2026-72943
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Deployment Services
MSRC Security Blog
SEVERE
CVE-2026-68887
Denial of Service
Windows Message Queuing Queue Manager
NO AUTH NETWORK
Severe
CVE-2026-68887
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Message Queuing Queue Manager
MSRC Security Blog
SEVERE
CVE-2026-69355
Remote Code Execution
Microsoft Exchange Server
NETWORK
Severe
CVE-2026-69355
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Exchange Server
MSRC Security Blog
SEVERE
CVE-2026-69356
Spoofing
Microsoft Exchange Server
NO AUTH NETWORK
Severe
CVE-2026-69356
9d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Microsoft Exchange Server
MSRC Security Blog
SEVERE
CVE-2026-69378
Denial of Service
Microsoft Exchange Server
NO AUTH NETWORK
Severe
CVE-2026-69378
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Microsoft Exchange Server
MSRC Security Blog
SEVERE
CVE-2026-69380
Privilege Escalation
Microsoft Exchange Server
NETWORK
Severe
CVE-2026-69380
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Exchange Server
MSRC Security Blog
SEVERE
CVE-2026-69382
Information Disclosure
Microsoft Exchange Server
NO AUTH NETWORK
Severe
CVE-2026-69382
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Exchange Server
MSRC Security Blog
SEVERE
CVE-2026-69443
Information Disclosure
Windows Device Health Attestation (DHA)
NO AUTH NETWORK
Severe
CVE-2026-69443
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Device Health Attestation (DHA)
MSRC Security Blog
SEVERE
CVE-2026-69469
Privilege Escalation
Windows USB Audio Class driver (usbaudio.sys
NO AUTH UNSPECIFIED
Severe
CVE-2026-69469
9d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Windows USB Audio Class driver (usbaudio.sys)
MSRC Security Blog
SEVERE
CVE-2026-69641
Privilege Escalation
Microsoft Exchange Server
NETWORK
Severe
CVE-2026-69641
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Exchange Server
MSRC Security Blog
SEVERE
CVE-2026-69642
Spoofing
Skype for Business
NO AUTH NETWORK
Severe
CVE-2026-69642
9d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Skype for Business
MSRC Security Blog
SEVERE
CVE-2026-69716
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-69716
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-69804
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-69804
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-69929
Information Disclosure
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-69929
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-69930
Information Disclosure
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-69930
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-70124
Information Disclosure
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-70124
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-72978
Denial of Service
Active Directory Federation Services (AD FS)
NO AUTH NETWORK
Severe
CVE-2026-72978
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Active Directory Federation Services (AD FS)
MSRC Security Blog
SEVERE
CVE-2026-77494
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-77494
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-77498
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-77498
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-77501
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-77501
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-77502
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-77502
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-77503
Privilege Escalation
Windows NTFS
NO AUTH LOCAL
Severe
CVE-2026-77503
9d
Remotely reachable with meaningful impact.
Impact Privilege EscalationVector LocalAuth None requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-77888
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-77888
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-77886
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-77886
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-77890
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-77890
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-77889
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-77889
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-77892
Privilege Escalation
Windows Boot Manager
NO AUTH UNSPECIFIED
Severe
CVE-2026-77892
9d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Windows Boot Manager
MSRC Security Blog
SEVERE
CVE-2026-77893
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-77893
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-77895
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-77895
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-77896
Denial of Service
Windows Remote Desktop Client
NO AUTH NETWORK
Severe
CVE-2026-77896
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Remote Desktop Client
MSRC Security Blog
SEVERE
CVE-2026-69268
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-69268
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-69273
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-69273
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-69282
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-69282
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-77908
Remote Code Execution
Microsoft Dynamics 365 On-Premises
NETWORK
Severe
CVE-2026-77908
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Dynamics 365 On-Premises
MSRC Security Blog
SEVERE
CVE-2026-78461
Security Bypass
Visual Studio Code
NO AUTH NETWORK
Severe
CVE-2026-78461
9d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-67378
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67378
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67376
Denial of Service
Microsoft SQL Server
NO AUTH NETWORK
Severe
CVE-2026-67376
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67379
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67379
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67384
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67384
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67636
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67636
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67643
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67643
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-68786
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-68786
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-78523
Denial of Service
Windows DNS Server
NO AUTH NETWORK
Severe
CVE-2026-78523
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DNS Server
MSRC Security Blog
SEVERE
CVE-2026-81349
Privilege Escalation
Azure HDInsight Ambari
NETWORK
Severe
CVE-2026-81349
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Azure HDInsight Ambari
MSRC Security Blog
SEVERE
CVE-2026-81356
Security Bypass
Visual Studio Code
NO AUTH NETWORK
Severe
CVE-2026-81356
9d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-81357
Security Bypass
Visual Studio Code
NO AUTH NETWORK
Severe
CVE-2026-81357
9d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-81376
Security Bypass
Visual Studio Code
NO AUTH NETWORK
Severe
CVE-2026-81376
9d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-81377
Spoofing
Visual Studio Code
NO AUTH NETWORK
Severe
CVE-2026-81377
9d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-81378
Security Bypass
Visual Studio Code
NO AUTH NETWORK
Severe
CVE-2026-81378
9d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-81380
Information Disclosure
GitHub Copilot and Visual Studio Code
NO AUTH NETWORK
Severe
CVE-2026-81380
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct GitHub Copilot and Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-81381
Information Disclosure
GitHub Copilot and Visual Studio Code
NO AUTH NETWORK
Severe
CVE-2026-81381
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct GitHub Copilot and Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-70065
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-70065
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-72949
Denial of Service
Windows SMB Server Network Transport Driver
NO AUTH NETWORK
Severe
CVE-2026-72949
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows SMB Server Network Transport Driver (srvnet.sys)
MSRC Security Blog
SEVERE
CVE-2026-70019
Information Disclosure
Windows Compressed Folder
NO AUTH NETWORK
Severe
CVE-2026-70019
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Compressed Folder
MSRC Security Blog
SEVERE
CVE-2026-84001
Denial of Service
Windows Key Distribution Center
NO AUTH NETWORK
Severe
CVE-2026-84001
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Key Distribution Center
MSRC Security Blog
SEVERE
CVE-2026-62813
Remote Code Execution
Windows Active Directory Domain Services
NETWORK
Severe
CVE-2026-62813
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Active Directory Domain Services
MSRC Security Blog
SEVERE
CVE-2026-66814
Privilege Escalation
Microsoft SQL Server
NETWORK
Severe
CVE-2026-66814
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-66818
Privilege Escalation
Microsoft SQL Server
NETWORK
Severe
CVE-2026-66818
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-66820
Privilege Escalation
SQL Server
NETWORK
Severe
CVE-2026-66820
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67380
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67380
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67381
Privilege Escalation
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67381
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67385
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67385
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67388
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67388
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67638
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67638
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67639
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67639
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-67642
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-67642
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-68775
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-68775
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-68827
Privilege Escalation
Windows GDI+
NETWORK
Severe
CVE-2026-68827
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows GDI+
MSRC Security Blog
SEVERE
CVE-2026-68834
Privilege Escalation
Windows NTFS
NETWORK
Severe
CVE-2026-68834
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-68838
Privilege Escalation
Windows NTFS
NETWORK
Severe
CVE-2026-68838
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-68880
Privilege Escalation
Windows Win32k
NETWORK
Severe
CVE-2026-68880
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Win32k
MSRC Security Blog
SEVERE
CVE-2026-68876
Privilege Escalation
Windows Program Compatibility Assistant Serv
NETWORK
Severe
CVE-2026-68876
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Program Compatibility Assistant Service
MSRC Security Blog
SEVERE
CVE-2026-68898
Denial of Service
Windows iSCSI
NO AUTH NETWORK
Severe
CVE-2026-68898
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows iSCSI
MSRC Security Blog
SEVERE
CVE-2026-68889
Privilege Escalation
Microsoft Standard XPS
NETWORK
Severe
CVE-2026-68889
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Standard XPS
MSRC Security Blog
SEVERE
CVE-2026-69272
Privilege Escalation
Microsoft Standard XPS
NETWORK
Severe
CVE-2026-69272
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Standard XPS
MSRC Security Blog
SEVERE
CVE-2026-69274
Privilege Escalation
Windows Win32k
NETWORK
Severe
CVE-2026-69274
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Win32k
MSRC Security Blog
SEVERE
CVE-2026-69305
Privilege Escalation
Microsoft Windows Search Component
NETWORK
Severe
CVE-2026-69305
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Windows Search Component
MSRC Security Blog
SEVERE
CVE-2026-69301
Privilege Escalation
Windows Win32k
NETWORK
Severe
CVE-2026-69301
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Win32k
MSRC Security Blog
SEVERE
CVE-2026-69313
Privilege Escalation
Microsoft Standard XPS
NETWORK
Severe
CVE-2026-69313
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Standard XPS
MSRC Security Blog
SEVERE
CVE-2026-69322
Privilege Escalation
Microsoft Windows Search Component
NETWORK
Severe
CVE-2026-69322
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Windows Search Component
MSRC Security Blog
SEVERE
CVE-2026-69329
Denial of Service
BranchCache
NO AUTH NETWORK
Severe
CVE-2026-69329
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct BranchCache
MSRC Security Blog
SEVERE
CVE-2026-69332
Privilege Escalation
Windows NTFS
NETWORK
Severe
CVE-2026-69332
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-69340
Privilege Escalation
Windows NTFS
NETWORK
Severe
CVE-2026-69340
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-69342
Denial of Service
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-69342
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-69346
Privilege Escalation
Windows Print Spooler Components
NETWORK
Severe
CVE-2026-69346
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Print Spooler Components
MSRC Security Blog
SEVERE
CVE-2026-69358
Remote Code Execution
Remote Desktop Client
NETWORK
Severe
CVE-2026-69358
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Remote Desktop Client
MSRC Security Blog
SEVERE
CVE-2026-69357
Privilege Escalation
Windows NDIS
NETWORK
Severe
CVE-2026-69357
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows NDIS
MSRC Security Blog
SEVERE
CVE-2026-69365
Privilege Escalation
Microsoft Local Security Authority (LSA) Ser
NETWORK
Severe
CVE-2026-69365
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Local Security Authority (LSA) Server
MSRC Security Blog
SEVERE
CVE-2026-69364
Privilege Escalation
Windows Print Spooler Components
NETWORK
Severe
CVE-2026-69364
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Print Spooler Components
MSRC Security Blog
SEVERE
CVE-2026-69396
Privilege Escalation
Windows NDIS
NETWORK
Severe
CVE-2026-69396
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows NDIS
MSRC Security Blog
SEVERE
CVE-2026-69428
Denial of Service
Windows LDAP - Lightweight Directory Access
NO AUTH NETWORK
Severe
CVE-2026-69428
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows LDAP - Lightweight Directory Access Protocol
MSRC Security Blog
SEVERE
CVE-2026-69427
Privilege Escalation
Microsoft VOLSNAP.SYS
NETWORK
Severe
CVE-2026-69427
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft VOLSNAP.SYS
MSRC Security Blog
SEVERE
CVE-2026-69462
Privilege Escalation
Windows Error Reporting
NETWORK
Severe
CVE-2026-69462
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Error Reporting
MSRC Security Blog
SEVERE
CVE-2026-69460
Privilege Escalation
Windows Modern Device Management (MDM)
NETWORK
Severe
CVE-2026-69460
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Modern Device Management (MDM)
MSRC Security Blog
SEVERE
CVE-2026-69512
Privilege Escalation
Windows Spaceport.sys
NETWORK
Severe
CVE-2026-69512
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Spaceport.sys
MSRC Security Blog
SEVERE
CVE-2026-69503
Privilege Escalation
Windows USB Driver
NETWORK
Severe
CVE-2026-69503
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows USB Driver
MSRC Security Blog
SEVERE
CVE-2026-69599
Remote Code Execution
Remote Desktop Services
NETWORK
Severe
CVE-2026-69599
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Remote Desktop Services
MSRC Security Blog
SEVERE
CVE-2026-69547
Remote Code Execution
Windows DHCP Server
NETWORK
Severe
CVE-2026-69547
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-69536
Remote Code Execution
Remote Desktop Services
NETWORK
Severe
CVE-2026-69536
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Remote Desktop Services
MSRC Security Blog
SEVERE
CVE-2026-69566
Remote Code Execution
Windows NTFS
NO AUTH UNSPECIFIED
Severe
CVE-2026-69566
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionAuth None requiredProduct Windows NTFS
MSRC Security Blog
SEVERE
CVE-2026-69625
Privilege Escalation
Connected User Experiences and Telemetry
NETWORK
Severe
CVE-2026-69625
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Connected User Experiences and Telemetry
MSRC Security Blog
SEVERE
CVE-2026-69597
Privilege Escalation
Windows HTTP.sys
NETWORK
Severe
CVE-2026-69597
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows HTTP.sys
MSRC Security Blog
SEVERE
CVE-2026-69602
Privilege Escalation
Windows PrintWorkflowUserSvc
NETWORK
Severe
CVE-2026-69602
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows PrintWorkflowUserSvc
MSRC Security Blog
SEVERE
CVE-2026-69680
Spoofing
Windows DNS
NO AUTH NETWORK
Severe
CVE-2026-69680
9d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Windows DNS
MSRC Security Blog
SEVERE
CVE-2026-69803
Information Disclosure
Windows DHCP Server
NO AUTH NETWORK
Severe
CVE-2026-69803
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows DHCP Server
MSRC Security Blog
SEVERE
CVE-2026-69643
Privilege Escalation
Windows Spaceport.sys
NETWORK
Severe
CVE-2026-69643
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Spaceport.sys
MSRC Security Blog
SEVERE
CVE-2026-69688
Privilege Escalation
Windows Encrypting File System (EFS)
NETWORK
Severe
CVE-2026-69688
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Encrypting File System (EFS)
MSRC Security Blog
SEVERE
CVE-2026-69727
Privilege Escalation
Windows Biometric Service
NETWORK
Severe
CVE-2026-69727
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Biometric Service
MSRC Security Blog
SEVERE
CVE-2026-69826
Privilege Escalation
Windows Biometric Service
NETWORK
Severe
CVE-2026-69826
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Biometric Service
MSRC Security Blog
SEVERE
CVE-2026-69773
Privilege Escalation
Windows Biometric Service
NETWORK
Severe
CVE-2026-69773
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Biometric Service
MSRC Security Blog
SEVERE
CVE-2026-69706
Privilege Escalation
Windows Win32k
NETWORK
Severe
CVE-2026-69706
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Win32k
MSRC Security Blog
SEVERE
CVE-2026-69793
Security Bypass
Windows TCP/IP
NO AUTH NETWORK
Severe
CVE-2026-69793
9d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Windows TCP/IP
MSRC Security Blog
SEVERE
CVE-2026-69809
Denial of Service
Windows Active Directory Domain Services
NO AUTH NETWORK
Severe
CVE-2026-69809
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Active Directory Domain Services
MSRC Security Blog
SEVERE
CVE-2026-69761
Privilege Escalation
Windows TCP/IP
NETWORK
Severe
CVE-2026-69761
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows TCP/IP
MSRC Security Blog
SEVERE
CVE-2026-69760
Denial of Service
Windows Kerberos
NO AUTH NETWORK
Severe
CVE-2026-69760
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Kerberos
MSRC Security Blog
SEVERE
CVE-2026-69807
Privilege Escalation
PowerShell
NETWORK
Severe
CVE-2026-69807
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct PowerShell
MSRC Security Blog
SEVERE
CVE-2026-58599
Remote Code Execution
HEVC Video Extensions
NO AUTH LOCAL
Severe
CVE-2026-58599
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector LocalAuth None requiredProduct HEVC Video Extensions
MSRC Security Blog
SEVERE
CVE-2026-64918
Spoofing
Microsoft Office
NO AUTH NETWORK
Severe
CVE-2026-64918
9d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Microsoft Office
MSRC Security Blog
SEVERE
CVE-2026-70579
Information Disclosure
Windows Mobile Broadband
NO AUTH NETWORK
Severe
CVE-2026-70579
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Mobile Broadband
MSRC Security Blog
SEVERE
CVE-2026-71349
Remote Code Execution
Windows Spaceport.sys
NO AUTH UNSPECIFIED
Severe
CVE-2026-71349
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionAuth None requiredProduct Windows Spaceport.sys
MSRC Security Blog
SEVERE
CVE-2026-71352
Remote Code Execution
Windows Remote Access Connection Manager
NETWORK
Severe
CVE-2026-71352
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Remote Access Connection Manager
MSRC Security Blog
SEVERE
CVE-2026-72928
Remote Code Execution
Windows DNS Server
NETWORK
Severe
CVE-2026-72928
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows DNS Server
MSRC Security Blog
SEVERE
CVE-2026-72932
Information Disclosure
Windows Message Queuing Queue Manager
NO AUTH NETWORK
Severe
CVE-2026-72932
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Message Queuing Queue Manager
MSRC Security Blog
SEVERE
CVE-2026-72942
Information Disclosure
Windows Spaceport.sys
NO AUTH NETWORK
Severe
CVE-2026-72942
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Spaceport.sys
MSRC Security Blog
SEVERE
CVE-2026-72954
Remote Code Execution
Windows Deployment Services
NETWORK
Severe
CVE-2026-72954
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Windows Deployment Services
MSRC Security Blog
SEVERE
CVE-2026-69490
Privilege Escalation
Windows USB Mass Storage Class Driver
NO AUTH UNSPECIFIED
Severe
CVE-2026-69490
9d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Windows USB Mass Storage Class Driver
MSRC Security Blog
SEVERE
CVE-2026-69464
Privilege Escalation
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-69464
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-58649
Information Disclosure
.NET
NO AUTH NETWORK
Severe
CVE-2026-58649
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct .NET
MSRC Security Blog
SEVERE
CVE-2026-72956
Information Disclosure
Microsoft Office PowerPoint
NO AUTH NETWORK
Severe
CVE-2026-72956
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office PowerPoint
MSRC Security Blog
SEVERE
CVE-2026-72985
Privilege Escalation
Volume Shadow Copy
NO AUTH UNSPECIFIED
Severe
CVE-2026-72985
9d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Volume Shadow Copy
MSRC Security Blog
SEVERE
CVE-2026-65772
Remote Code Execution
Microsoft Dynamics 365 On-Premises
NETWORK
Severe
CVE-2026-65772
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Dynamics 365 On-Premises
MSRC Security Blog
SEVERE
CVE-2026-69465
Remote Code Execution
Microsoft Office SharePoint
NETWORK
Severe
CVE-2026-69465
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Office SharePoint
MSRC Security Blog
SEVERE
CVE-2026-69304
Denial of Service
ASP.NET Core
NO AUTH NETWORK
Severe
CVE-2026-69304
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct ASP.NET Core
MSRC Security Blog
SEVERE
CVE-2026-72989
Information Disclosure
Windows Failover Cluster
NO AUTH NETWORK
Severe
CVE-2026-72989
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows Failover Cluster
MSRC Security Blog
SEVERE
CVE-2026-73019
Security Bypass
Windows URL Moniker
NO AUTH NETWORK
Severe
CVE-2026-73019
9d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Windows URL Moniker
MSRC Security Blog
SEVERE
CVE-2026-72999
Privilege Escalation
Windows USB Hub Driver
NO AUTH UNSPECIFIED
Severe
CVE-2026-72999
9d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Windows USB Hub Driver
MSRC Security Blog
SEVERE
CVE-2026-73012
Privilege Escalation
Windows Management Services
NETWORK
Severe
CVE-2026-73012
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Management Services
MSRC Security Blog
SEVERE
CVE-2026-73025
Security Bypass
Windows iSCSI
NO AUTH NETWORK
Severe
CVE-2026-73025
9d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Windows iSCSI
MSRC Security Blog
SEVERE
CVE-2026-73028
Privilege Escalation
SQL Server
NETWORK
Severe
CVE-2026-73028
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct SQL Server
MSRC Security Blog
SEVERE
CVE-2026-77480
Privilege Escalation
SQL Server
NETWORK
Severe
CVE-2026-77480
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct SQL Server
MSRC Security Blog
SEVERE
CVE-2026-77483
Privilege Escalation
SQL Server
NETWORK
Severe
CVE-2026-77483
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct SQL Server
MSRC Security Blog
SEVERE
CVE-2026-77484
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-77484
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-77487
Privilege Escalation
SQL Server
NETWORK
Severe
CVE-2026-77487
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct SQL Server
MSRC Security Blog
SEVERE
CVE-2026-77911
Information Disclosure
Microsoft Office Word
NO AUTH NETWORK
Severe
CVE-2026-77911
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Word
MSRC Security Blog
SEVERE
CVE-2026-69562
Information Disclosure
Microsoft SQL Server
NO AUTH NETWORK
Severe
CVE-2026-69562
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-78441
Information Disclosure
Windows OLE DB
NO AUTH NETWORK
Severe
CVE-2026-78441
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Windows OLE DB
MSRC Security Blog
SEVERE
CVE-2026-78451
Privilege Escalation
Microsoft Windows SCSI Class System File
NO AUTH UNSPECIFIED
Severe
CVE-2026-78451
9d
Remotely reachable with meaningful impact.
Impact Privilege EscalationAuth None requiredProduct Microsoft Windows SCSI Class System File
MSRC Security Blog
SEVERE
CVE-2026-78453
Information Disclosure
Microsoft Windows SCSI Class System File
NO AUTH NETWORK
Severe
CVE-2026-78453
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Windows SCSI Class System File
MSRC Security Blog
SEVERE
CVE-2026-78456
Remote Code Execution
SQL Server
NETWORK
Severe
CVE-2026-78456
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct SQL Server
MSRC Security Blog
SEVERE
CVE-2026-78462
Security Bypass
Visual Studio Code
NO AUTH NETWORK
Severe
CVE-2026-78462
9d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-66819
Privilege Escalation
Microsoft SQL Server
NETWORK
Severe
CVE-2026-66819
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-77481
Remote Code Execution
Microsoft SQL Server
NETWORK
Severe
CVE-2026-77481
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft SQL Server
MSRC Security Blog
SEVERE
CVE-2026-80079
Information Disclosure
Microsoft Office Word
NO AUTH NETWORK
Severe
CVE-2026-80079
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Word
MSRC Security Blog
SEVERE
CVE-2026-80073
Information Disclosure
Microsoft Office Outlook
NO AUTH NETWORK
Severe
CVE-2026-80073
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Outlook
MSRC Security Blog
SEVERE
CVE-2026-78522
Information Disclosure
Microsoft Office Word
NO AUTH NETWORK
Severe
CVE-2026-78522
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Word
MSRC Security Blog
SEVERE
CVE-2026-80084
Information Disclosure
Microsoft Office Outlook
NO AUTH NETWORK
Severe
CVE-2026-80084
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Office Outlook
MSRC Security Blog
SEVERE
CVE-2026-80096
Privilege Escalation
Windows Remote Desktop Services
NETWORK
Severe
CVE-2026-80096
9d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Windows Remote Desktop Services
MSRC Security Blog
SEVERE
CVE-2026-81353
Remote Code Execution
HEIF Image Extensions
NO AUTH LOCAL
Severe
CVE-2026-81353
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector LocalAuth None requiredProduct HEIF Image Extensions
MSRC Security Blog
SEVERE
CVE-2026-81383
Information Disclosure
Visual Studio Code
NO AUTH NETWORK
Severe
CVE-2026-81383
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Visual Studio Code
MSRC Security Blog
SEVERE
CVE-2026-57099
Denial of Service
ASP.NET Core
NO AUTH NETWORK
Severe
CVE-2026-57099
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct ASP.NET Core
MSRC Security Blog
SEVERE
CVE-2026-83948
Remote Code Execution
Microsoft Azure CLI
NETWORK
Severe
CVE-2026-83948
9d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Azure CLI
MSRC Security Blog
SEVERE
CVE-2026-83989
Denial of Service
Windows Services for NFS ONCRPC XDR Driver
NO AUTH NETWORK
Severe
CVE-2026-83989
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Windows Services for NFS ONCRPC XDR Driver
MSRC Security Blog
SEVERE
CVE-2026-84003
Spoofing
Microsoft Authentication Library (MSAL) for
NO AUTH NETWORK
Severe
CVE-2026-84003
9d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Microsoft Authentication Library (MSAL) for Node.js
MSRC Security Blog
SEVERE
CVE-2026-66307
Denial of Service
Skype for Business and Lync
NO AUTH NETWORK
Severe
CVE-2026-66307
9d
Remotely reachable with meaningful impact.
Impact Denial of ServiceVector NetworkAuth None requiredProduct Skype for Business and Lync
MSRC Security Blog
SEVERE
CVE-2026-62804
Remote Code Execution
Microsoft Word
NO AUTH LOCAL
Severe
CVE-2026-62804
9d
Remotely reachable with meaningful impact.
Impact Remote Code ExecutionVector LocalAuth None requiredProduct Microsoft Word
MSRC Security Blog
SEVERE
CVE-2026-62906
Information Disclosure
Microsoft Discovery Studio
NO AUTH NETWORK
Severe
CVE-2026-62906
9d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Discovery Studio
MSRC Security Blog
SEVERE
CVE-2026-70331
Spoofing
Microsoft Edge for iOS
NO AUTH NETWORK
Severe
CVE-2026-70331
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Microsoft Edge for iOS
MSRC Security Blog
SEVERE
CVE-2026-62904
Information Disclosure
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Severe
CVE-2026-62904
20d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
SEVERE
CVE-2026-66324
Spoofing
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Severe
CVE-2026-66324
20d
Remotely reachable with meaningful impact.
Impact SpoofingVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
SEVERE
CVE-2026-70341
Remote Code Execution
Microsoft Edge (Chromium-based)
NETWORK
Severe
CVE-2026-70341
20d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
SEVERE
CVE-2026-70309
Security Bypass
Microsoft Edge (Chromium-based)
NO AUTH NETWORK
Severe
CVE-2026-70309
20d
Remotely reachable with meaningful impact.
Impact Security BypassVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
MSRC Security Blog
SEVERE
CVE-2026-69836
Remote Code Execution
Microsoft Entra ID
UNSPECIFIED
Severe
CVE-2026-69836
was critical · 19bd
27d
Reported as exploited in the wild before a patch was widely deployed. Downgraded from critical after 19 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionProduct Microsoft Entra ID
MSRC Security Blog
SEVERE
CVE-2026-62834
Privilege Escalation
Azure Data Factory
NO AUTH NETWORK
Severe
CVE-2026-62834
was critical · 20bd
28d
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Azure Data Factory
MSRC Security Blog
SEVERE
CVE-2026-65801
Privilege Escalation
Microsoft Exchange Online
NO AUTH NETWORK
Severe
CVE-2026-65801
was critical · 20bd
28d
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Microsoft Exchange Online
MSRC Security Blog
SEVERE
CVE-2026-68789
Privilege Escalation
Azure SQL Database
NETWORK
Severe
CVE-2026-68789
28d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Azure SQL Database
MSRC Security Blog
SEVERE
CVE-2026-69519
Information Disclosure
Azure Stack HCI
NO AUTH NETWORK
Severe
CVE-2026-69519
28d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Azure Stack HCI
MSRC Security Blog
SEVERE
CVE-2026-69851
Privilege Escalation
Microsoft Entra ID
NETWORK
Severe
CVE-2026-69851
28d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Entra ID
MSRC Security Blog
SEVERE
CVE-2026-65770
Remote Code Execution
Azure Managed Instance for Apache Cassandra
NO AUTH NETWORK
Severe
CVE-2026-65770
was critical · 20bd
28d
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Azure Managed Instance for Apache Cassandra
MSRC Security Blog
SEVERE
CVE-2026-63509
Privilege Escalation
Microsoft Fabric
NETWORK
Severe
CVE-2026-63509
28d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Microsoft Fabric
MSRC Security Blog
SEVERE
CVE-2026-65816
Privilege Escalation
Azure Arc
NO AUTH NETWORK
Severe
CVE-2026-65816
was critical · 20bd
28d
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Azure Arc
MSRC Security Blog
SEVERE
CVE-2026-66309
Privilege Escalation
Azure SQL Database
NETWORK
Severe
CVE-2026-66309
28d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Azure SQL Database
MSRC Security Blog
SEVERE
CVE-2026-66800
Information Disclosure
Azure Data Factory
NO AUTH NETWORK
Severe
CVE-2026-66800
28d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Azure Data Factory
MSRC Security Blog
SEVERE
CVE-2026-68782
Privilege Escalation
Azure SQL Database
NETWORK
Severe
CVE-2026-68782
28d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Azure SQL Database
MSRC Security Blog
SEVERE
CVE-2026-69419
Remote Code Execution
Azure Data Manager for Energy
NETWORK
Severe
CVE-2026-69419
28d
Serious impact, but the attacker needs valid credentials first.
Impact Remote Code ExecutionVector NetworkAuth Credentials requiredProduct Azure Data Manager for Energy
MSRC Security Blog
SEVERE
CVE-2026-69502
Privilege Escalation
Azure SQL Database
NO AUTH NETWORK
Severe
CVE-2026-69502
was critical · 20bd
28d
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Azure SQL Database
MSRC Security Blog
SEVERE
CVE-2026-69400
Privilege Escalation
Azure Logic Apps
NO AUTH NETWORK
Severe
CVE-2026-69400
was critical · 20bd
28d
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Azure Logic Apps
MSRC Security Blog
SEVERE
CVE-2026-69555
Privilege Escalation
Azure Arc
NO AUTH NETWORK
Severe
CVE-2026-69555
was critical · 20bd
28d
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Azure Arc
MSRC Security Blog
SEVERE
CVE-2026-69558
Information Disclosure
Microsoft Partner Center
NO AUTH NETWORK
Severe
CVE-2026-69558
28d
Remotely reachable with meaningful impact.
Impact Information DisclosureVector NetworkAuth None requiredProduct Microsoft Partner Center
MSRC Security Blog
SEVERE
CVE-2026-69543
Privilege Escalation
Azure Virtual Machines
NETWORK
Severe
CVE-2026-69543
28d
Serious impact, but the attacker needs valid credentials first.
Impact Privilege EscalationVector NetworkAuth Credentials requiredProduct Azure Virtual Machines
MSRC Security Blog
SEVERE
CVE-2026-33824
Remote Code Execution
Windows Internet Key Exchange (IKE) Service
EXPLOITED UNSPECIFIED
Severe
CVE-2026-33824
Exploited in the wild
was critical · 22bd
28d
Listed in CISA's Known Exploited Vulnerabilities catalog — attackers are already using it. Downgraded from critical after 22 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionProduct Windows Internet Key Exchange (IKE) Service Extensions
MSRC Security Blog
MODERATE
CVE-2026-50311
Privilege Escalation
Windows Server
UNSPECIFIED
Moderate
CVE-2026-50311
9h
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows Server
MSRC Security Blog
MODERATE
CVE-2026-55039
Remote Code Execution
Microsoft Excel
UNSPECIFIED
Moderate
CVE-2026-55039
9h
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Excel
MSRC Security Blog
MODERATE
CVE-2026-56176
Privilege Escalation
Windows Win32k
UNSPECIFIED
Moderate
CVE-2026-56176
9h
Limited impact or meaningful preconditions.
Impact Privilege EscalationProduct Windows Win32k
MSRC Security Blog
MODERATE
CVE-2026-69671
Remote Code Execution
Microsoft Office Word
UNSPECIFIED
Moderate
CVE-2026-69671
9h
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Office Word
MSRC Security Blog
MODERATE
CVE-2026-69678
Remote Code Execution
Microsoft Office PowerPoint
UNSPECIFIED
Moderate
CVE-2026-69678
9h
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Office PowerPoint
MSRC Security Blog
MODERATE
CVE-2026-69686
Remote Code Execution
Microsoft Office Word
UNSPECIFIED
Moderate
CVE-2026-69686
9h
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Office Word
MSRC Security Blog
MODERATE
CVE-2026-69722
Remote Code Execution
Microsoft Office Word
UNSPECIFIED
Moderate
CVE-2026-69722
9h
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Office Word
MSRC Security Blog
MODERATE
CVE-2026-69724
Remote Code Execution
Microsoft Office SharePoint
UNSPECIFIED
Moderate
CVE-2026-69724
9h
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Office SharePoint
MSRC Security Blog
MODERATE
CVE-2026-69759
Remote Code Execution
Microsoft Office Word
UNSPECIFIED
Moderate
CVE-2026-69759
9h
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Office Word
MSRC Security Blog
MODERATE
CVE-2026-69767
Remote Code Execution
Microsoft Office PowerPoint
UNSPECIFIED
Moderate
CVE-2026-69767
9h
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Office PowerPoint
MSRC Security Blog
MODERATE
CVE-2026-69797
Remote Code Execution
Microsoft Office PowerPoint
UNSPECIFIED
Moderate
CVE-2026-69797
9h
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Office PowerPoint
MSRC Security Blog
MODERATE
CVE-2026-77898
Remote Code Execution
Microsoft Office
UNSPECIFIED
Moderate
CVE-2026-77898
9h
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Office
MSRC Security Blog
MODERATE
CVE-2026-78439
Remote Code Execution
Microsoft Office Graphics Component
UNSPECIFIED
Moderate
CVE-2026-78439
9h
Limited impact or meaningful preconditions.
Impact Remote Code ExecutionProduct Microsoft Office Graphics Component
MSRC Security Blog
Nothing matches those filters.
