ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
GBHackerspublished ()ingested Divya

Microsoft September 2026 Patch Tuesday Fixes 973 Vulnerabilities and 2 Exploited Zero-Days

highAdvisory exploited in the wildimportance 80CVE-2026-85880CVE-2026-85877CVE-2026-85875CVE-2026-85360CVE-2026-84003CVE-2026-84001CVE-2026-84000CVE-2026-83999CVE-2026-83998CVE-2026-83997CVE-2026-83996CVE-2026-83995CVE-2026-83992CVE-2026-83991CVE-2026-83990CVE-2026-83989CVE-2026-83988CVE-2026-83987CVE-2026-83986CVE-2026-83985CVE-2026-83983CVE-2026-83982CVE-2026-83981CVE-2026-83980CVE-2026-83979CVE-2026-83978CVE-2026-83977CVE-2026-83976CVE-2026-83975CVE-2026-83974
AI summary · glm-5.3-flash

Microsoft's September 2026 Patch Tuesday fixes 973 vulnerabilities, including two zero-days already exploited in the wild.

Microsoft's September 2026 Patch Tuesday addresses 973 vulnerabilities across Windows, Office, and Azure components, including two zero-days already exploited in the wild. CVE-2026-81963, an elevation of privilege flaw in the Windows Update Stack, is flagged as an exploited zero-day. The release includes numerous remote code execution and information disclosure fixes for Microsoft Excel and Word, plus patches for the Windows kernel, ALPC, Print Spooler, ReFS, Entra ID, and Azure CLI.

  • 973 vulnerabilities patched, including two zero-days exploited in the wild
  • CVE-2026-81963 Windows Update Stack EoP marked as exploited zero-day
  • Dozens of Excel and Word RCE and information disclosure fixes
  • Patches span Windows kernel, ALPC, Print Spooler, ReFS, Entra ID, Azure CLI
Read the original
VendorsMicrosoft
ProductsWindowsMicrosoft ExcelMicrosoft WordMicrosoft Entra IDAzure CLI
OrganizationsMicrosoft
Tagsmicrosoftpatch-tuesdaywindowszero-dayexcelofficevulnerability

Vulnerabilities mentionedAll →

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2026-83992
+20 in the same advisory: …83996 …83988 …83983 …83977 …83978 …83979 +14
Heap-Based Buffer Overflow RCE in Microsoft Windows Imaging Component

CVE-2026-83992 is a heap-based buffer overflow (CWE-122) in the Windows Imaging Component (WIC), the built-in Windows service that decodes image files. An unauthenticated remote attacker can trigger the overflow by convincing a user to open or preview a specially crafted image; the CVSS 8.8 vector (AV:N/AC:L/PR:N/UI:R) confirms no privileges are required but user interaction is needed. Successful exploitation yields remote code execution in the context of the affected process, with high impact on confidentiality, integrity, and availability. Effectively all Windows systems that parse images with WIC are plausibly affected, though the available data does not enumerate specific Windows version ranges. There is currently no public proof-of-concept, the flaw is not in CISA KEV, and EPSS estimates only a 0.6% probability of exploitation within 30 days (47th percentile), indicating no known in-the-wild exploitation; the flaw was addressed in Microsoft's September 2026 Patch Tuesday, which fixed 973 vulnerabilities including two unrelated exploited zero-days.

Do: Apply Microsoft's September 2026 Patch Tuesday Windows security updates across all endpoints and servers, prioritizing user-facing systems. Because exploitation requires user interaction, exercise caution with image files from untrusted sources (email attachments, downloads, preview panes) until patching is complete. Verify patch status by confirming the latest Windows cumulative update is installed on each system.

8.8
group max
<1%
  • Microsoft Windows Imaging Component (WIC), a component of Microsoft Windows
masshundreds of millions of Windows devices (WIC is a default component present on essentially all Windows installations)
CVE-2026-83990
Local Privilege Escalation via Stack Overflow in Microsoft Graphics Component

CVE-2026-83990 is a stack-based buffer overflow (CWE-121) in the Microsoft Graphics Component, the Windows component that processes graphics operations. Per the CVSS vector, a local, low-privileged authorized user can trigger the overflow without user interaction, corrupting a stack buffer in the component. A successful attacker elevates privileges locally, gaining higher (typically administrator/SYSTEM-level) rights with high impact on confidentiality, integrity, and availability on the host. Any system shipping the Graphics Component is affected; specific version ranges were not enumerated in the source data, and fixes ship in Microsoft's September 2026 security updates. There is no public PoC, the flaw is not in CISA KEV, and EPSS is low (0.3%), so exploitation is not confirmed; it was patched as part of September 2026 Patch Tuesday, which also addressed two separately exploited zero-days.

Do: Apply Microsoft's September 2026 security updates (Patch Tuesday) to all Windows clients and servers via Windows Update, WSUS, or Intune/ConfigMgr, since no public PoC or workaround is known. Prioritize systems that expose interactive logon to untrusted or standard users, such as RDP hosts, terminal servers, and shared workstations, because local access is required for exploitation. Confirm deployment of the September 2026 updates in your patch-management reporting before marking this CVE closed.

7.8<1%
  • Microsoft Graphics Component (shipped with Microsoft Windows)
mass≈1 billion+ Windows devices (Graphics Component present across the Windows install base)
CVE-2026-83991
Missing Authentication in Windows Cloud Files Mini Filter Enables Local Tampering

CVE-2026-83991 is a missing-authentication flaw (CWE-306) in the Windows Cloud Files Mini Filter Driver, the kernel component that handles cloud placeholder files such as OneDrive Files On-Demand. A local attacker who already has low-privileged authorized access to a machine can invoke the driver's critical function without proper authentication checks and tamper with cloud-managed file data, with high integrity impact but no confidentiality or availability loss per the CVSS vector. Because the attack vector is local (AV:L) with required privileges of only a standard user, it does not by itself enable remote compromise; it matters most on shared or multi-user systems where untrusted users hold local accounts. All supported Windows 10 releases from 1809 onward, Windows 11 from 23H2 onward, and Windows Server 2019/2022/2025 are listed as affected. The flaw is not in CISA's KEV, its EPSS score is a low 0.3%, but a public proof-of-concept write-up exists on GitHub, and Microsoft shipped a fix as part of its September 2026 Patch Tuesday release.

Do: Apply Microsoft's September 2026 Patch Tuesday security updates to all affected Windows 10, Windows 11, and Windows Server builds. Prioritize shared workstations, VDI hosts, and servers where low-privileged or untrusted users have local sign-in rights, since exploitation requires local access and only tampers with cloud files data. No in-the-wild exploitation is reported (EPSS 0.3%, not in KEV), but a public PoC exists, so treat the patch as routine-high priority rather than emergency.

5.5<1% PoC
  • microsoft Windows 10 1809 Windows 10 version 1809 (all builds prior to the September 2026 security update)
  • microsoft Windows 10 21H2 Windows 10 version 21H2 (all builds prior to the September 2026 security update)
  • microsoft Windows 10 22H2 Windows 10 version 22H2 (all builds prior to the September 2026 security update)
  • +7 more
masshundreds of millions of Windows devices (Windows 10/11 installed base exceeds 1 billion machines)
CVE-2026-83997
Use-After-Free RCE in Windows Message Queuing (MSMQ)

CVE-2026-83997 is a use-after-free (CWE-416) vulnerability in Microsoft's Windows Message Queuing (MSMQ) service that permits an unauthenticated, remote attacker to execute arbitrary code over the network. It is triggered when the MSMQ service processes specially crafted network traffic that causes memory to be used after it has been freed, with the high attack-complexity rating (AC:H) indicating the attacker likely needs to win a timing or state race to land the free-then-use condition. Successful exploitation yields code execution in the context of the MSMQ service, with high confidentiality, integrity, and availability impact, meaning an attacker could take over the affected host. Only Windows systems that have the optional Message Queuing (MSMQ) feature installed and running are exposed, since MSMQ is not enabled by default on most Windows installations and is typically found on legacy application and queuing servers. There is no evidence of exploitation so far: the flaw is not in CISA's KEV, no public proof-of-concept is known, EPSS is 0.5% (42nd percentile), and the two actively exploited zero-days mentioned in September 2026 Patch Tuesday headlines are separate issues fixed in the same release.

Do: Apply Microsoft's September 2026 Patch Tuesday security updates for Windows, which include the fix for CVE-2026-83997, prioritizing servers where the Message Queuing (msmq/mqsvc) service is installed. Where MSMQ is not required, disable and remove the Message Queuing feature; where it is needed, restrict inbound access to MSMQ network ports from untrusted networks and verify the service is not exposed to the internet.

8.1<1%
  • Microsoft Windows Message Queuing (MSMQ) - Windows releases with the optional Message Queuing feature installed and running
largeplausibly on the order of hundreds of thousands of Windows hosts worldwide have MSMQ installed (estimate), with only a smaller subset internet-exposed
CVE-2026-83998
Heap Buffer Overflow RCE in Microsoft Remote Desktop Client

CVE-2026-83998 is a heap-based buffer overflow (CWE-122) in the Microsoft Remote Desktop Client, the component used to connect out to remote machines over RDP. The CVSS vector (AV:N/AC:L/PR:N/UI:R) indicates an unauthenticated network attacker can trigger the overflow, but only with user interaction — consistent with the flaw being exercised when a client establishes a connection and processes attacker-influenced data from the remote side. Successful exploitation yields remote code execution in the context of the client process, with high impact to confidentiality, integrity, and availability (CVSS 8.8 High). Users and organizations whose workstations run the affected Remote Desktop Client to reach RDP servers — administrators, support staff, and remote workers in particular — are in scope per Microsoft's September 2026 Patch Tuesday advisory. As of this analysis there is no public proof-of-concept, the CVE is not in CISA KEV, and EPSS is a modest 0.4%; the two actively exploited zero-days referenced in the September 2026 release headlines are not identified as this CVE.

Do: Apply Microsoft's September 2026 security updates for the Remote Desktop Client via Windows Update, WSUS, or Intune, prioritizing administrator workstations, jump hosts, and support machines that routinely make outbound RDP connections. Until patched, restrict users to connecting only to trusted RDP servers and consider limiting outbound RDP (TCP 3389) to known hosts or gateways. Verify the exact affected version ranges in Microsoft's advisory, as they are not enumerated in the source data.

8.8<1%
  • Microsoft Remote Desktop Client
mass≫1,000,000 users
CVE-2026-85877
+1 in the same advisory: …83999
Heap-Based Buffer Overflow RCE in Windows Print Spooler Components (CVE-2026-85877)

CVE-2026-85877 is a heap-based buffer overflow (CWE-122) in the Windows Print Spooler components, fixed by Microsoft in its September 2026 Patch Tuesday release. A remote, unauthenticated attacker can trigger the flaw by sending crafted input to the Print Spooler service over the network, though the CVSS vector (UI:R) indicates some form of user interaction is required for successful exploitation. If exploited, the attacker gains arbitrary code execution on the target system, with the CVSS base metrics indicating high impact to confidentiality, integrity, and availability. Any Windows system with the Print Spooler service enabled is affected; the available data does not enumerate specific vulnerable Windows versions or builds. There is currently no known public proof-of-concept, the flaw is not in CISA's KEV, and EPSS assigns only a 0.4% probability of exploitation within the next 30 days (37th percentile).

Do: Apply the September 2026 Microsoft Patch Tuesday security updates as soon as possible, prioritizing Windows servers and other systems where the Print Spooler is reachable from untrusted networks. As interim mitigation, disable the Print Spooler service on hosts that do not need printing and restrict inbound RPC/SMB access to spooler-enabled machines. Audit your estate for systems running the Print Spooler service and confirm patched status after deployment.

8.8
group max
<1%
  • Microsoft Windows Print Spooler Components (Windows systems with the Print Spooler service enabled)
masshundreds of millions of Windows devices (Print Spooler enabled by default on Windows workstations and most servers)
CVE-2026-84003
Capture-replay authentication bypass in Microsoft MSAL for Node.js

CVE-2026-84003 is an authentication bypass by capture-replay (CWE-294) in the Microsoft Authentication Library (MSAL) for Node.js, the library Node.js applications use to authenticate users and services against Microsoft's identity platform. An attacker positioned on the network who can capture authentication material in transit can replay it to authenticate as a legitimate user or client, with no privileges or user interaction required; the high attack complexity reflects the difficulty of intercepting and replaying the exchange while it remains valid. Successful exploitation enables spoofing with high impact on confidentiality and integrity (the attacker can act as the victim), though there is no availability impact. Any organization running Node.js server applications, APIs, daemons, or CLIs that depend on MSAL for Node.js is affected, with end users of those applications exposed through them. As of this writing there is no known public proof-of-concept, the flaw is not in CISA KEV, and EPSS puts the 30-day exploitation probability at 0.4% (37th percentile); the fix shipped in Microsoft's September 2026 Patch Tuesday.

Do: Upgrade the @azure/msal-node package to the patched release issued with September 2026 Patch Tuesday (check Microsoft's advisory for the exact fixed version numbers) and redeploy every Node.js service that depends on it. Review Microsoft Entra ID sign-in and authentication logs for the same captured credentials or tokens being replayed from unexpected sources, and prioritize internet-facing or network-exposed services where traffic interception is feasible. Note the high attack complexity: exploitation requires an attacker to capture in-flight authentication material, so exposure depends heavily on network paths and TLS posture.

7.4<1%
  • Microsoft Authentication Library (MSAL) for Node.js (@azure/msal-node)
mass~1M+ downstream Node.js deployments (npm downloads for @azure/msal-node run on the order of 1M/week)
CVE-2026-85875
Out-of-Bounds Read in Microsoft Excel Leads to Local Information Disclosure

CVE-2026-85875 is an out-of-bounds read (CWE-125) in Microsoft Excel, the spreadsheet component of Microsoft Office, rated 5.5 (Medium) on the CVSS 3.1 scale. Exploitation is local and requires user interaction: an unauthenticated attacker must persuade a user to open a specially crafted workbook, causing Excel to read past the end of an allocated memory buffer. A successful attack discloses sensitive information from process memory (high confidentiality impact), with no impact on integrity or availability. Affected products include Excel within Microsoft 365 Apps and Microsoft 365, as well as the perpetual Office 2016, 2019, 2021, and 2024 releases. Exploitation status is none known: the flaw is not in CISA KEV, no public proof-of-concept has been published, EPSS is low at 0.4%, and it was addressed in Microsoft's September 2026 Patch Tuesday release (973-974 fixes, including 2 exploited zero-days not attributed to this CVE).

Do: Apply the September 2026 Microsoft security updates for Excel/Office across all affected editions (Microsoft 365 Apps and Office 2016, 2019, 2021, 2024), using your normal Office update channel or WSUS/Intune reporting to confirm deployment. Because the flaw requires a local user to open a crafted workbook, reinforce user caution around spreadsheets from untrusted sources until patching completes. No public exploit exists and EPSS is low, so there is no urgent emergency-patching driver, but close this out in your regular Patch Tuesday cycle.

5.5<1%
  • microsoft Excel (Microsoft Office Excel)
  • Microsoft 365 Apps
  • Microsoft 365
  • +4 more
masshundreds of millions to 1 billion+ Office/Excel users worldwide
CVE-2026-85880
Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation

CVE-2026-85880 is a heap-based buffer overflow in Windows Advanced Local Procedure Call (ALPC), the Windows mechanism for local inter-process communication. An authorized local attacker can trigger the overflow by submitting crafted input over ALPC, corrupting heap memory in the component that handles the request. Successful exploitation allows the attacker to execute code with elevated privileges, typically gaining SYSTEM-level control of the local host, which is especially valuable as a post-exploitation or sandbox-escape step. Affected products include Windows 10 (1607, 1809, 21H2, 22H2) and Windows Server 2012, 2016, 2019, and 2022, meaning most on-premises Windows estates are in scope. The flaw was fixed in Microsoft's record 974-CVE September 2026 Patch Tuesday and was added to CISA's KEV on 2026-09-08, confirming exploitation in the wild; press reports describe Windows zero-days being chained with a Chrome zero-day in 'BlueMoon' kit attacks, though the data does not explicitly confirm this CVE is the Windows flaw in that chain.

Do: Apply Microsoft's September 2026 security (cumulative) updates for each affected Windows 10 and Windows Server build, as no public PoC or workaround is documented; CISA's KEV listing (added 2026-09-08) triggers BOD 26-04 patching requirements for federal agencies, so prioritize accordingly. Give priority to hosts where unprivileged users can log in — RDS/VDI servers, jump boxes, shared workstations — and to internet-exposed Windows servers, since an ALPC local privilege escalation is a common component in exploit chains combining remote code execution or browser flaws with elevation to SYSTEM. Organizations unable to patch promptly should follow BOD 26-04 guidance for cloud services or restrict local access to affected hosts until updates are applied.

7.8<1% KEV
  • Microsoft Windows 10 1607, 1809, 21H2, 22H2
  • Microsoft Windows Server 2012, 2016, 2019, 2022
mass≈100M+ Windows installations (Windows 10 1607–22H2 on consumer/enterprise endpoints plus widely deployed Windows Server 2012–2022)
Full article2,088 words · extracted from gbhackers.com · click to collapse
CVE-2026-85880Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityCVE-2026-85877Windows Print Spooler Remote Code Execution VulnerabilityCVE-2026-85875Microsoft Office Excel Information Disclosure VulnerabilityCVE-2026-85360Windows Kernel Elevation of Privilege VulnerabilityCVE-2026-84003Microsoft Authentication Library (MSAL) for Node.js Spoofing VulnerabilityCVE-2026-84001Windows Key Distribution Center Denial of Service VulnerabilityCVE-2026-84000Microsoft Graphics Component Remote Code Execution VulnerabilityCVE-2026-83999Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityCVE-2026-83998Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-83997Windows Message Queuing Remote Code Execution VulnerabilityCVE-2026-83996Windows Error Reporting Elevation of Privilege VulnerabilityCVE-2026-83995Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-83992Windows Imaging Component Remote Code Execution VulnerabilityCVE-2026-83991Windows Cloud Files Mini Filter Driver Tampering VulnerabilityCVE-2026-83990Microsoft Graphics Component Elevation of Privilege VulnerabilityCVE-2026-83989Windows Services for NFS ONCRPC XDR Driver Denial of Service VulnerabilityCVE-2026-83988Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83987Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83986Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83985Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83983Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83982Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83981Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83980Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83979Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83978Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83977Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83976Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83975Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83974Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83973Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83972Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83971Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83970Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83969Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83968Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83967Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83955Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83954Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-83952Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityCVE-2026-83951Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-83949Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-83948Microsoft Azure CLI Remote Code Execution VulnerabilityCVE-2026-83942Windows Kernel Elevation of Privilege VulnerabilityCVE-2026-83941Entra ID Elevation of Privilege VulnerabilityCVE-2026-83940Windows Device Association Service Elevation of Privilege VulnerabilityCVE-2026-83939Windows Secure Kernel Mode Elevation of Privilege VulnerabilityCVE-2026-83711Microsoft Azure Active Directory B2C Elevation of Privilege VulnerabilityCVE-2026-83501Windows Virtualization-Based Security (VBS) Information Disclosure VulnerabilityCVE-2026-83498Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityCVE-2026-81963Windows Update Stack Elevation of Privilege Vulnerability — Exploited Zero-DayCVE-2026-81960Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81959Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81958Microsoft Excel Information Disclosure VulnerabilityCVE-2026-81957Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81956Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81955Windows Graphics Component Remote Code Execution VulnerabilityCVE-2026-81954Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81953Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81952Microsoft Word Remote Code Execution VulnerabilityCVE-2026-81951Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81950Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81949Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81948Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81947Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81401Microsoft Excel Information Disclosure VulnerabilityCVE-2026-81400Microsoft Excel Information Disclosure VulnerabilityCVE-2026-81399Microsoft Excel Information Disclosure VulnerabilityCVE-2026-81398Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81397Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81396Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81395Microsoft Excel Information Disclosure VulnerabilityCVE-2026-81394Microsoft Excel Information Disclosure VulnerabilityCVE-2026-81393Microsoft Excel Information Disclosure VulnerabilityCVE-2026-81392Microsoft Excel Information Disclosure VulnerabilityCVE-2026-81391Microsoft Excel Information Disclosure VulnerabilityCVE-2026-81390Microsoft Excel Information Disclosure VulnerabilityCVE-2026-81389Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81388Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81387Microsoft Excel Information Disclosure VulnerabilityCVE-2026-81386Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-81385Microsoft Office Publisher Remote Code Execution VulnerabilityCVE-2026-81383Visual Studio Code Information Disclosure VulnerabilityCVE-2026-81381GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityCVE-2026-81380GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityCVE-2026-81379Visual Studio Code Security Feature Bypass VulnerabilityCVE-2026-81378Visual Studio Code Security Feature Bypass VulnerabilityCVE-2026-81377Visual Studio Code Tampering VulnerabilityCVE-2026-81376Visual Studio Code Security Feature Bypass VulnerabilityCVE-2026-81357Visual Studio Code Security Feature Bypass VulnerabilityCVE-2026-81356Visual Studio Code Security Feature Bypass VulnerabilityCVE-2026-81355Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution VulnerabilityCVE-2026-81354Windows Hello Elevation of Privilege VulnerabilityCVE-2026-81353HEIF Image Extensions Remote Code Execution VulnerabilityCVE-2026-81352Web Media Extensions Remote Code Execution VulnerabilityCVE-2026-81349Azure HDInsight Ambari Elevation of Privilege VulnerabilityCVE-2026-80098Copilot Studio Elevation of Privilege VulnerabilityCVE-2026-80097Microsoft Authenticator Elevation of Privilege VulnerabilityCVE-2026-80096Windows Remote Desktop Services Elevation of Privilege VulnerabilityCVE-2026-80093Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2026-80091Microsoft Office Information Disclosure VulnerabilityCVE-2026-80090Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-80089Microsoft Office Information Disclosure VulnerabilityCVE-2026-80088Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-80087Microsoft Office Information Disclosure VulnerabilityCVE-2026-80086Microsoft Office PowerPoint Information Disclosure VulnerabilityCVE-2026-80085Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-80084Microsoft Office Outlook Information Disclosure VulnerabilityCVE-2026-80083Windows Hyper-V Remote Code Execution VulnerabilityCVE-2026-80082Microsoft Office Information Disclosure VulnerabilityCVE-2026-80081Microsoft Office PowerPoint Remote Code Execution VulnerabilityCVE-2026-80080Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-80079Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-80078Microsoft Office Information Disclosure VulnerabilityCVE-2026-80077Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-80076Microsoft Office Information Disclosure VulnerabilityCVE-2026-80075Windows Work Folders Elevation of Privilege VulnerabilityCVE-2026-80074Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-80073Microsoft Office Outlook Information Disclosure VulnerabilityCVE-2026-78526Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-78525Microsoft Office Outlook Remote Code Execution VulnerabilityCVE-2026-78524Microsoft Office Remote Code Execution VulnerabilityCVE-2026-78523Windows DNS Server Denial of Service VulnerabilityCVE-2026-78522Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-78521Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-78520Microsoft Office Outlook Information Disclosure VulnerabilityCVE-2026-78519Microsoft Office Outlook Remote Code Execution VulnerabilityCVE-2026-78518Microsoft Office Excel Remote Code Execution VulnerabilityCVE-2026-78517Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-78516Windows Storage Information Disclosure VulnerabilityCVE-2026-78515Microsoft Office Excel Information Disclosure VulnerabilityCVE-2026-78514Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-78513Microsoft Office PowerPoint Information Disclosure VulnerabilityCVE-2026-78512Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-78511Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-78510Microsoft Word Remote Code Execution VulnerabilityCVE-2026-78509Microsoft Office Outlook Remote Code Execution VulnerabilityCVE-2026-78508Windows CD-ROM Driver Information Disclosure VulnerabilityCVE-2026-78507Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-78506Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-78505Microsoft Office Remote Code Execution VulnerabilityCVE-2026-78504Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-78503Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-78502Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-78464Windows MIDI Service Module Elevation of Privileges VulnerabilityCVE-2026-78463Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-78462Visual Studio Code Security Feature Bypass VulnerabilityCVE-2026-78461Visual Studio Code Security Feature Bypass VulnerabilityCVE-2026-78457Windows Security Health Service Elevation of Privilege VulnerabilityCVE-2026-78456SQL Server Remote Code Execution VulnerabilityCVE-2026-78455Xbox Information Disclosure VulnerabilityCVE-2026-78454Windows CD-ROM Driver Information Disclosure VulnerabilityCVE-2026-78453Microsoft Windows SCSI Class System File Information Disclosure VulnerabilityCVE-2026-78452Microsoft Windows SCSI Class System File Information Disclosure VulnerabilityCVE-2026-78451Microsoft Windows SCSI Class System File Elevation of Privilege VulnerabilityCVE-2026-78450Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityCVE-2026-78449Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityCVE-2026-78448Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-78447Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-78446Windows Distributed File System (DFS) Denial of Service VulnerabilityCVE-2026-78445Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityCVE-2026-78444Microsoft Failover Cluster Remote Code Execution VulnerabilityCVE-2026-78442Windows OLE DB Remote Code Execution VulnerabilityCVE-2026-78441Windows OLE DB Information Disclosure VulnerabilityCVE-2026-78439Microsoft Office Graphics Component Remote Code Execution VulnerabilityCVE-2026-77911Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-77909Azure CycleCloud Information Disclosure VulnerabilityCVE-2026-77908Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCVE-2026-77907Visual Studio Remote Code Execution VulnerabilityCVE-2026-77906Visual Studio Remote Code Execution VulnerabilityCVE-2026-77905Windows Management Instrumentation Elevation of Privilege VulnerabilityCVE-2026-77904Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityCVE-2026-77901Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-77899Windows Security Center Elevation of Privilege VulnerabilityCVE-2026-77898Microsoft Office Remote Code Execution VulnerabilityCVE-2026-77897Microsoft Power Automate Desktop Elevation of Privilege VulnerabilityCVE-2026-77896Windows Remote Desktop Client Denial of Service VulnerabilityCVE-2026-77895Windows DHCP Server Denial of Service VulnerabilityCVE-2026-77894Windows Installer Elevation of Privilege VulnerabilityCVE-2026-77893Windows DHCP Server Denial of Service VulnerabilityCVE-2026-77892Windows Boot Manager Elevation of Privilege VulnerabilityCVE-2026-77891Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-77890Windows DHCP Server Denial of Service VulnerabilityCVE-2026-77889Windows DHCP Server Denial of Service VulnerabilityCVE-2026-77888Windows DHCP Server Denial of Service VulnerabilityCVE-2026-77887Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-77886Windows DHCP Server Denial of Service VulnerabilityCVE-2026-77505Windows DNS Server Remote Code Execution VulnerabilityCVE-2026-77504Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-77503Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-77502Windows DHCP Server Denial of Service VulnerabilityCVE-2026-77501Windows DHCP Server Denial of Service VulnerabilityCVE-2026-77500Windows Device Association Service Elevation of Privilege VulnerabilityCVE-2026-77499Windows DHCP Server Denial of Service VulnerabilityCVE-2026-77498Windows DHCP Server Denial of Service VulnerabilityCVE-2026-77495Windows Imaging Component Remote Code Execution VulnerabilityCVE-2026-77494Windows DHCP Server Denial of Service VulnerabilityCVE-2026-77493Windows Graphics Component Remote Code Execution VulnerabilityCVE-2026-77492Windows Storage Port Driver Information Disclosure VulnerabilityCVE-2026-77491Windows GDI Information Disclosure VulnerabilityCVE-2026-77489Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-77488Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-77487SQL Server Elevation of Privilege VulnerabilityCVE-2026-77486Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-77485SQL Server Elevation of Privilege VulnerabilityCVE-2026-77484Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-77483SQL Server Elevation of Privilege VulnerabilityCVE-2026-77482Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-77481Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-77480SQL Server Elevation of Privilege VulnerabilityCVE-2026-73029Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-73028SQL Server Elevation of Privilege VulnerabilityCVE-2026-73026Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-73025Windows iSCSI Security Feature Bypass VulnerabilityCVE-2026-73024Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege VulnerabilityCVE-2026-73023Windows Imaging Component Remote Code Execution VulnerabilityCVE-2026-73022Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityCVE-2026-73021Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-73020Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-73019Windows URL Moniker Security Feature Bypass VulnerabilityCVE-2026-73018Graphic Fonts Remote Code Execution VulnerabilityCVE-2026-73017Graphics Kernel Remote Code Execution VulnerabilityCVE-2026-73016DirectWrite Remote Code Execution VulnerabilityCVE-2026-73015Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-73014Data Sharing Service Client Elevation of Privilege VulnerabilityCVE-2026-73013Windows Imaging Component Remote Code Execution VulnerabilityCVE-2026-73012Windows Management Services Elevation of Privilege VulnerabilityCVE-2026-73011Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-73010Microsoft Failover Cluster Remote Code Execution VulnerabilityCVE-2026-73009Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityCVE-2026-73008Windows Biometric Service Information Disclosure VulnerabilityCVE-2026-73007Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-73006DirectWrite Remote Code Execution VulnerabilityCVE-2026-73005Windows Authentication Methods Elevation of Privilege VulnerabilityCVE-2026-73004Windows Autopilot Tampering VulnerabilityCVE-2026-73003Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityCVE-2026-73002Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-73001Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-73000Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-72999Windows USB Hub Driver Elevation of Privilege VulnerabilityCVE-2026-72997Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-72996Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-72995Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-72994Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-72993Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-72992Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-72991Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-72990Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-72989Windows Failover Cluster Information Disclosure VulnerabilityCVE-2026-72988Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-72987Windows DNS Remote Code Execution VulnerabilityCVE-2026-72986Graphic Fonts Remote Code Execution VulnerabilityCVE-2026-72985Volume Shadow Copy Elevation of Privilege VulnerabilityCVE-2026-72983Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityCVE-2026-72982Windows Netlogon Remote Code Execution VulnerabilityCVE-2026-72981IP Helper Remote Code Execution VulnerabilityCVE-2026-72980Windows Hello Security Feature Bypass VulnerabilityCVE-2026-72979Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-72978Active Directory Federation Services (AD FS) Denial of Service VulnerabilityCVE-2026-72977Microsoft Office PowerPoint Information Disclosure VulnerabilityCVE-2026-72976Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-72975Microsoft Office PowerPoint Information Disclosure VulnerabilityCVE-2026-72974Microsoft Office Excel Information Disclosure VulnerabilityCVE-2026-72973Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-72972Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-72967Windows Network Connection Broker Elevation of Privilege VulnerabilityCVE-2026-72966Windows Remote Access Connection Manager Tampering VulnerabilityCVE-2026-72965Windows WebClient Service Elevation of Privilege VulnerabilityCVE-2026-72964Windows Internet Connection Sharing (ICS) Tampering VulnerabilityCVE-2026-72963Windows Modern Execution Server Elevation of Privilege VulnerabilityCVE-2026-72962Windows USB Video Driver Elevation of Privilege VulnerabilityCVE-2026-72961Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2026-72960Windows Media Player Remote Code Execution VulnerabilityCVE-2026-72959Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2026-72958Windows Credential Guard Elevation of Privilege VulnerabilityCVE-2026-72957Windows Deployment Services Remote Code Execution VulnerabilityCVE-2026-72956Microsoft Office PowerPoint Information Disclosure VulnerabilityCVE-2026-72954Windows Deployment Services Remote Code Execution VulnerabilityCVE-2026-72953Windows USB Driver Elevation of Privilege VulnerabilityCVE-2026-72952Windows Spaceport.sys Remote Code Execution VulnerabilityCVE-2026-72950Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2026-72949Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service VulnerabilityCVE-2026-72948Windows DNS Elevation of Privilege VulnerabilityCVE-2026-72947Windows File History Service Elevation of Privilege VulnerabilityCVE-2026-72946Microsoft Storage Port Driver Elevation of Privilege VulnerabilityCVE-2026-72945Windows Task Scheduler Information Disclosure VulnerabilityCVE-2026-72944Role: Windows Fax Service Elevation of Privilege VulnerabilityCVE-2026-72943Windows Deployment Services Remote Code Execution VulnerabilityCVE-2026-72942Windows Spaceport.sys Information Disclosure VulnerabilityCVE-2026-72941Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-72940Windows Schannel Remote Code Execution VulnerabilityCVE-2026-72939Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityCVE-2026-72938Microsoft Office PowerPoint Information Disclosure VulnerabilityCVE-2026-72937Windows Storage Port Driver Information Disclosure VulnerabilityCVE-2026-72936Windows SMB Client Remote Code Execution VulnerabilityCVE-2026-72935Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-72933Microsoft WDAC OLE DB provider for SQL Remote Code Execution VulnerabilityCVE-2026-72932Windows Message Queuing Queue Manager Information Disclosure VulnerabilityCVE-2026-72931Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service VulnerabilityCVE-2026-72930Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityCVE-2026-72929Windows Installer Elevation of Privilege VulnerabilityCVE-2026-72928Windows DNS Server Remote Code Execution VulnerabilityCVE-2026-72927Winsock Elevation of Privilege VulnerabilityCVE-2026-72926Windows Internet Connection Sharing (ICS) Elevation of Privilege VulnerabilityCVE-2026-71353Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityCVE-2026-71352Windows Remote Access Connection Manager Remote Code Execution VulnerabilityCVE-2026-71351Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityCVE-2026-71350Windows Spaceport.sys Remote Code Execution VulnerabilityCVE-2026-71349Windows Spaceport.sys Remote Code Execution VulnerabilityCVE-2026-71348Windows Spaceport.sys Remote Code Execution VulnerabilityCVE-2026-71345Windows Spaceport.sys Remote Code Execution VulnerabilityCVE-2026-71343Windows Remote Access Connection Manager Remote Code Execution VulnerabilityCVE-2026-71342Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2026-71341Windows Partition Management Driver Information Disclosure VulnerabilityCVE-2026-71340Windows File History Service Elevation of Privilege VulnerabilityCVE-2026-71339Windows Installer Elevation of Privilege VulnerabilityCVE-2026-71338Windows Failover Cluster Elevation of Privilege VulnerabilityCVE-2026-71337Windows Storage Management Provider Elevation of Privilege VulnerabilityCVE-2026-71336Windows Work Folder Service Remote Code Execution VulnerabilityCVE-2026-71334Windows NFS Portmapper Elevation of Privilege VulnerabilityCVE-2026-71333Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2026-71332Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege VulnerabilityCVE-2026-71330Windows Services for NFS ONCRPC XDR Driver Information Disclosure VulnerabilityCVE-2026-71329Windows NTFS Remote Code Execution VulnerabilityCVE-2026-71328.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-70587Windows Remote Desktop Protocol Information Disclosure VulnerabilityCVE-2026-70586Windows Paint Remote Code Execution VulnerabilityCVE-2026-70585Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityCVE-2026-70584Windows Core Messaging Elevation of Privilege VulnerabilityCVE-2026-70583Windows Core Messaging Elevation of Privilege VulnerabilityCVE-2026-70582Windows Management Instrumentation Elevation of Privilege VulnerabilityCVE-2026-70581Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-70579Windows Mobile Broadband Information Disclosure VulnerabilityCVE-2026-70578Windows Credential Guard Elevation of Privilege VulnerabilityCVE-2026-70577Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityCVE-2026-70575Windows Schannel Denial of Service VulnerabilityCVE-2026-70574Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityCVE-2026-70573Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-70572Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-70570Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2026-70569Windows Spaceport.sys Elevation of Privilege VulnerabilityCVE-2026-70568Windows Defender Firewall Service Elevation of Privilege VulnerabilityCVE-2026-70567Windows Display Enhancement Service Elevation of Privilege VulnerabilityCVE-2026-70565Windows AF_UNIX Socket Provider Elevation of Privilege VulnerabilityCVE-2026-70564Windows Print Spooler Components Elevation of Privilege VulnerabilityCVE-2026-70563Windows Shell Spoofing VulnerabilityCVE-2026-70562Windows Audio Service Elevation of Privilege VulnerabilityCVE-2026-70352Azure AI Language Elevation of Privilege VulnerabilityCVE-2026-70351Microsoft WebP Image Extension Remote Code Execution VulnerabilityCVE-2026-70342Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2026-70334Visual Studio Code Security Feature Bypass VulnerabilityCVE-2026-70296Windows Imaging Component Remote Code Execution VulnerabilityCVE-2026-70290Win32k Information Disclosure VulnerabilityCVE-2026-70289Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-70283Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-70203Windows Media Player Remote Code Execution VulnerabilityCVE-2026-70178Microsoft Fabric Elevation of Privilege VulnerabilityCVE-2026-70145Microsoft Windows Search Component Information Disclosure VulnerabilityCVE-2026-70124Windows DHCP Server Information Disclosure VulnerabilityCVE-2026-70091Windows DNS Denial of Service VulnerabilityCVE-2026-70065Windows DHCP Server Denial of Service VulnerabilityCVE-2026-70019Windows Compressed Folder Information Disclosure VulnerabilityCVE-2026-69989Windows DNS Server Remote Code Execution VulnerabilityCVE-2026-69930Windows DHCP Server Information Disclosure VulnerabilityCVE-2026-69929Windows DHCP Server Information Disclosure VulnerabilityCVE-2026-69921Windows Print Spooler Components Elevation of Privilege VulnerabilityCVE-2026-69911Microsoft Windows Search Component Elevation of Privilege VulnerabilityCVE-2026-69910Windows Hyper-V Remote Code Execution VulnerabilityCVE-2026-69907Windows Enterprise App Management Elevation of Privilege VulnerabilityCVE-2026-69906Windows Secure Kernel Mode Elevation of Privilege VulnerabilityCVE-2026-69904Microsoft Office SharePoint Information Disclosure VulnerabilityCVE-2026-69900Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityCVE-2026-69896Windows Error Reporting Elevation of Privilege VulnerabilityCVE-2026-69895Windows Spaceport.sys Information Disclosure VulnerabilityCVE-2026-69891Windows Media Elevation of Privilege VulnerabilityCVE-2026-69890Windows Virtual Trusted Platform Module Elevation of Privilege VulnerabilityCVE-2026-69889Windows Bluetooth Service Elevation of Privilege VulnerabilityCVE-2026-69881Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2026-69878Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-69876Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-69875Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-69874Windows ALPC Elevation of Privilege VulnerabilityCVE-2026-69866Windows Device Association Service Elevation of Privilege VulnerabilityCVE-2026-69864Windows Hello Elevation of Privilege VulnerabilityCVE-2026-69862Windows Wireless Wide Area Network Service Information Disclosure VulnerabilityCVE-2026-69860Windows Imaging Component Remote Code Execution VulnerabilityCVE-2026-69859Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityCVE-2026-69858Windows DNS Server Remote Code Execution VulnerabilityCVE-2026-69857Azure Cosmos DB Spoofing VulnerabilityCVE-2026-69854Spring Cloud Azure Elevation of Privilege VulnerabilityCVE-2026-69853Win32k Information Disclosure VulnerabilityCVE-2026-69852Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2026-69847Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-69846Windows Secure Kernel Mode Elevation of Privilege VulnerabilityCVE-2026-69845Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-69844Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69841Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityCVE-2026-69839Windows iSCSI Target Service Denial of Service VulnerabilityCVE-2026-69838Windows Print Spooler Components Elevation of Privilege VulnerabilityCVE-2026-69834Windows ALPC Elevation of Privilege VulnerabilityCVE-2026-69832Win32k Information Disclosure VulnerabilityCVE-2026-69829Windows Shell Remote Code Execution VulnerabilityCVE-2026-69827Windows DNS Server Remote Code Execution VulnerabilityCVE-2026-69826Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69824Microsoft Standard XPS Remote Code Execution VulnerabilityCVE-2026-69822Windows Kerberos Elevation of Privilege VulnerabilityCVE-2026-69821Active Directory Certificate Services (AD CS) Elevation of Privilege VulnerabilityCVE-2026-69820Windows Hello Elevation of Privilege VulnerabilityCVE-2026-69819RPC Runtime Library Remote Code Execution VulnerabilityCVE-2026-69818Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69817Windows Bluetooth Port Driver Elevation of Privilege VulnerabilityCVE-2026-69816Windows Accounts Control Elevation of Privilege VulnerabilityCVE-2026-69814Windows Credential Providers Elevation of Privilege VulnerabilityCVE-2026-69813Windows DNS Server Remote Code Execution VulnerabilityCVE-2026-69809Windows Active Directory Domain Services Denial of Service VulnerabilityCVE-2026-69808Win32k Information Disclosure VulnerabilityCVE-2026-69807PowerShell Elevation of Privilege VulnerabilityCVE-2026-69806.NET Elevation of Privilege VulnerabilityCVE-2026-69805.NET Elevation of Privilege VulnerabilityCVE-2026-69804Microsoft Office SharePoint Remote Code Execution VulnerabilityCVE-2026-69803Windows DHCP Server Information Disclosure VulnerabilityCVE-2026-69801Windows Audio Service Elevation of Privilege VulnerabilityCVE-2026-69799Windows Hello Elevation of Privilege VulnerabilityCVE-2026-69797Microsoft Office PowerPoint Remote Code Execution VulnerabilityCVE-2026-69794Windows Encrypting File System (EFS) Information Disclosure VulnerabilityCVE-2026-69793Windows TCP/IP Security Feature Bypass VulnerabilityCVE-2026-69792Windows Win32K Security Feature Bypass VulnerabilityCVE-2026-69791Windows Device Association Service Elevation of Privilege VulnerabilityCVE-2026-69790Windows Credential Providers Elevation of Privilege VulnerabilityCVE-2026-69787Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69786Windows Text Shaping Remote Code Execution VulnerabilityCVE-2026-69785Windows Smart Card Elevation of Privilege VulnerabilityCVE-2026-69784Windows Hello Elevation of Privilege VulnerabilityCVE-2026-69782Windows DNS Server Remote Code Execution VulnerabilityCVE-2026-69781Windows DHCP Client Denial of Service VulnerabilityCVE-2026-69779Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69778Microsoft Office Access Remote Code Execution VulnerabilityCVE-2026-69777Windows DHCP Client Elevation of Privilege VulnerabilityCVE-2026-69775Windows DWM Core Library Elevation of Privilege VulnerabilityCVE-2026-69773Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69772Windows Network File System Remote Code Execution VulnerabilityCVE-2026-69771Windows Container Manager Service Security Feature Bypass VulnerabilityCVE-2026-69770Windows Spaceport.sys Information Disclosure VulnerabilityCVE-2026-69769Windows HTTP Print Provider Remote Code Execution VulnerabilityCVE-2026-69768Windows RNDIS Remote Code Execution VulnerabilityCVE-2026-69767Microsoft Office PowerPoint Remote Code Execution VulnerabilityCVE-2026-69764Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-69762Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69761Windows TCP/IP Elevation of Privilege VulnerabilityCVE-2026-69760Windows Kerberos Denial of Service VulnerabilityCVE-2026-69759Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-69758Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityCVE-2026-69757Windows TCP/IP Elevation of Privilege VulnerabilityCVE-2026-69744Windows Kerberos Denial of Service VulnerabilityCVE-2026-69742Microsoft Office Publisher Remote Code Execution VulnerabilityCVE-2026-69741Windows Spaceport.sys Information Disclosure VulnerabilityCVE-2026-69740Windows Hello Elevation of Privilege VulnerabilityCVE-2026-69739Microsoft Office Information Disclosure VulnerabilityCVE-2026-69738Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69735Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityCVE-2026-69734Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-69732Windows Link Layer Topology Discovery Protocol Remote Code Execution VulnerabilityCVE-2026-69731HID Class Driver Elevation of Privilege VulnerabilityCVE-2026-69730Windows DNS Server Remote Code Execution VulnerabilityCVE-2026-69729Windows Credential Providers Remote Code Execution VulnerabilityCVE-2026-69727Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69725Windows Hello Elevation of Privilege VulnerabilityCVE-2026-69724Microsoft Office SharePoint Remote Code Execution VulnerabilityCVE-2026-69723Windows Kernel Information Disclosure VulnerabilityCVE-2026-69722Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-69720Windows MIDI Service Module Elevation of Privileges VulnerabilityCVE-2026-69719Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-69717Windows Group Policy Elevation of Privilege VulnerabilityCVE-2026-69716Microsoft Office SharePoint Elevation of Privilege VulnerabilityCVE-2026-69715Windows Direct Show Remote Code Execution VulnerabilityCVE-2026-69714Windows Device Association Service Elevation of Privilege VulnerabilityCVE-2026-69713Windows Secure Boot Security Feature Bypass VulnerabilityCVE-2026-69712Windows Key Distribution Center Remote Code Execution VulnerabilityCVE-2026-69711Windows Device Association Service Elevation of Privilege VulnerabilityCVE-2026-69710Windows Hello Elevation of Privilege VulnerabilityCVE-2026-69709Windows NTFS Remote Code Execution VulnerabilityCVE-2026-69708Windows Web Platform Storage Elevation of Privilege VulnerabilityCVE-2026-69707Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityCVE-2026-69706Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69694Windows IP Address Management (IPAM) Service Elevation of Privilege VulnerabilityCVE-2026-69693Windows Device Association Broker Service Elevation of Privilege VulnerabilityCVE-2026-69692Windows Audio Service Elevation of Privilege VulnerabilityCVE-2026-69691Windows Spaceport.sys Elevation of Privilege VulnerabilityCVE-2026-69690Microsoft Office SharePoint Spoofing VulnerabilityCVE-2026-69689Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69688Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityCVE-2026-69687Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityCVE-2026-69686Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-69685Windows Kerberos Elevation of Privilege VulnerabilityCVE-2026-69684Windows Error Reporting Information Disclosure VulnerabilityCVE-2026-69683Microsoft Office SharePoint Information Disclosure VulnerabilityCVE-2026-69682Windows Host Guardian Service Elevation of Privilege VulnerabilityCVE-2026-69681Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityCVE-2026-69680Windows DNS Spoofing VulnerabilityCVE-2026-69679Windows DHCP Server Denial of Service VulnerabilityCVE-2026-69678Microsoft Office PowerPoint Remote Code Execution VulnerabilityCVE-2026-69676Windows Kerberos Remote Code Execution VulnerabilityCVE-2026-69674Windows Modern Device Management (MDM) Security Feature Bypass VulnerabilityCVE-2026-69672Windows DNS Information Disclosure VulnerabilityCVE-2026-69671Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-69669Windows Kernel Remote Code Execution VulnerabilityCVE-2026-69654Windows Accounts Control Elevation of Privilege VulnerabilityCVE-2026-69652Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69649Raw Image Extension Remote Code Execution VulnerabilityCVE-2026-69648Windows Notification Elevation of Privilege VulnerabilityCVE-2026-69646Skype for Business Spoofing VulnerabilityCVE-2026-69645Windows Message Queuing Elevation of Privilege VulnerabilityCVE-2026-69643Windows Spaceport.sys Elevation of Privilege VulnerabilityCVE-2026-69642Skype for Business Spoofing VulnerabilityCVE-2026-69641Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2026-69638Windows NTFS Remote Code Execution VulnerabilityCVE-2026-69637Windows DHCP Server Denial of Service VulnerabilityCVE-2026-69636Microsoft Office SharePoint Information Disclosure VulnerabilityCVE-2026-69632Microsoft Office Remote Code Execution VulnerabilityCVE-2026-69631Windows DNS Denial of Service VulnerabilityCVE-2026-69630Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69629Microsoft Office Outlook Remote Code Execution VulnerabilityCVE-2026-69628Windows iSCSI Remote Code Execution VulnerabilityCVE-2026-69627Windows Remote Desktop Licensing Service Information Disclosure VulnerabilityCVE-2026-69626Microsoft Office Information Disclosure VulnerabilityCVE-2026-69625Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityCVE-2026-69624Active Directory Certificate Services (AD CS) Tampering VulnerabilityCVE-2026-69623Windows HTTP Print Provider Remote Code Execution VulnerabilityCVE-2026-69621Role: Windows Fax Service Elevation of Privilege VulnerabilityCVE-2026-69620Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-69619Windows exFAT File System Elevation of Privilege VulnerabilityCVE-2026-69618Windows SMB Client Information Disclosure VulnerabilityCVE-2026-69617Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityCVE-2026-69616Windows Remote Desktop Services Information Disclosure VulnerabilityCVE-2026-69615Microsoft Office SharePoint Spoofing VulnerabilityCVE-2026-69614Microsoft Office Access Remote Code Execution VulnerabilityCVE-2026-69613Windows Image Acquisition Elevation of Privilege VulnerabilityCVE-2026-69612Windows Error Reporting Elevation of Privilege VulnerabilityCVE-2026-69611Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityCVE-2026-69610Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69609Win32k Information Disclosure VulnerabilityCVE-2026-69608Microsoft Windows Search Component Elevation of Privilege VulnerabilityCVE-2026-69607Windows Deployment Services Remote Code Execution VulnerabilityCVE-2026-69606Windows Shell Elevation of Privilege VulnerabilityCVE-2026-69605Microsoft Install Service Elevation of Privilege VulnerabilityCVE-2026-69604Windows Audio Service Elevation of Privilege VulnerabilityCVE-2026-69603Windows Hyper-V Remote Code Execution VulnerabilityCVE-2026-69602Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityCVE-2026-69601Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2026-69600Microsoft Windows Search Component Elevation of Privilege VulnerabilityCVE-2026-69599Remote Desktop Services Remote Code Execution VulnerabilityCVE-2026-69598Windows iSCSI Remote Code Execution VulnerabilityCVE-2026-69597Windows HTTP.sys Elevation of Privilege VulnerabilityCVE-2026-69595Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityCVE-2026-69594Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityCVE-2026-69593Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69592Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityCVE-2026-69591Windows NTFS Information Disclosure VulnerabilityCVE-2026-69590Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2026-69589Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69588Windows TCP/IP Denial of Service VulnerabilityCVE-2026-69587Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2026-69586Microsoft Windows PDF Remote Code Execution VulnerabilityCVE-2026-69585Microsoft Windows Search Component Elevation of Privilege VulnerabilityCVE-2026-69584Windows USB Video Driver Elevation of Privilege VulnerabilityCVE-2026-69583Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69582Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityCVE-2026-69581Windows Device Association Service Elevation of Privilege VulnerabilityCVE-2026-69580Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69579Windows Message Queuing Remote Code Execution VulnerabilityCVE-2026-69578Windows Kernel Elevation of Privilege VulnerabilityCVE-2026-69576Graphic Fonts Elevation of Privilege VulnerabilityCVE-2026-69575Windows Storage Spaces Controller Elevation of Privilege VulnerabilityCVE-2026-69574Windows Device Association Service Elevation of Privilege VulnerabilityCVE-2026-69573Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityCVE-2026-69572Windows SMB Client Information Disclosure VulnerabilityCVE-2026-69571Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityCVE-2026-69569Windows Print Spooler Components Denial of Service VulnerabilityCVE-2026-69568Storage Spaces Controller Information Disclosure VulnerabilityCVE-2026-69567Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-69566Windows NTFS Remote Code Execution VulnerabilityCVE-2026-69564Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege VulnerabilityCVE-2026-69563Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityCVE-2026-69562Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-69561Windows CD-ROM Driver Elevation of Privilege VulnerabilityCVE-2026-69560Windows Work Folder Service Elevation of Privilege VulnerabilityCVE-2026-69559Microsoft Teams for Android Information Disclosure VulnerabilityCVE-2026-69556Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-69554Microsoft Windows Search Component Tampering VulnerabilityCVE-2026-69553Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2026-69552Windows Print Spooler Components Information Disclosure VulnerabilityCVE-2026-69551Windows DNS Server Remote Code Execution VulnerabilityCVE-2026-69549Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityCVE-2026-69548Windows RNDIS Information Disclosure VulnerabilityCVE-2026-69547Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-69546Windows Active Directory Domain Services Remote Code Execution VulnerabilityCVE-2026-69544Windows SMB Client Elevation of Privilege VulnerabilityCVE-2026-69542Windows Camera Frame Server Monitor Elevation of Privilege VulnerabilityCVE-2026-69541Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityCVE-2026-69540Windows Audio Service Elevation of Privilege VulnerabilityCVE-2026-69539Remote Desktop Services Remote Code Execution VulnerabilityCVE-2026-69538Windows Spaceport.sys Remote Code Execution VulnerabilityCVE-2026-69536Remote Desktop Services Remote Code Execution VulnerabilityCVE-2026-69535Windows Spaceport.sys Elevation of Privilege VulnerabilityCVE-2026-69534Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityCVE-2026-69532Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-69531Microsoft Windows Speech Tampering VulnerabilityCVE-2026-69530Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityCVE-2026-69529Microsoft Office Access Remote Code Execution VulnerabilityCVE-2026-69528Windows Shell Elevation of Privilege VulnerabilityCVE-2026-69527Windows USB Mass Storage Class Driver Information Disclosure VulnerabilityCVE-2026-69525Remote Desktop Services Remote Code Execution VulnerabilityCVE-2026-69524Windows Active Directory Domain Services Remote Code Execution VulnerabilityCVE-2026-69522.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-69518Windows Remote Desktop Remote Code Execution VulnerabilityCVE-2026-69517Windows Wireless Networking Elevation of Privilege VulnerabilityCVE-2026-69516Connected Devices Platform Service (Cdpsvc) Elevation of Privilege VulnerabilityCVE-2026-69514Remote Desktop Services Remote Code Execution VulnerabilityCVE-2026-69513Windows Error Reporting Elevation of Privilege VulnerabilityCVE-2026-69512Windows Spaceport.sys Elevation of Privilege VulnerabilityCVE-2026-69511Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2026-69510Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-69509Role: Windows Fax Service Elevation of Privilege VulnerabilityCVE-2026-69508Windows MIDI Service Module Elevation of Privileges VulnerabilityCVE-2026-69507Microsoft Windows Search Component Information Disclosure VulnerabilityCVE-2026-69505Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-69504Windows NTFS Information Disclosure VulnerabilityCVE-2026-69503Windows USB Driver Elevation of Privilege VulnerabilityCVE-2026-69501Windows Secure Kernel Mode Elevation of Privilege VulnerabilityCVE-2026-69500Windows Image Acquisition Elevation of Privilege VulnerabilityCVE-2026-69499Windows Imaging Component Remote Code Execution VulnerabilityCVE-2026-69498Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69497Windows DHCP Server Denial of Service VulnerabilityCVE-2026-69496Windows Compressed Folder Remote Code Execution VulnerabilityCVE-2026-69495Windows Event Logging Service Remote Code Execution VulnerabilityCVE-2026-69494Windows Event Logging Service Remote Code Execution VulnerabilityCVE-2026-69493Windows Event Logging Service Remote Code Execution VulnerabilityCVE-2026-69492Windows Partition Management Driver Elevation of Privilege VulnerabilityCVE-2026-69491Microsoft DirectMusic Remote Code Execution VulnerabilityCVE-2026-69490Windows USB Mass Storage Class Driver Elevation of Privilege VulnerabilityCVE-2026-69489Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69488Windows Device Association Service Elevation of Privilege VulnerabilityCVE-2026-69485Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-69483Windows Image Acquisition Information Disclosure VulnerabilityCVE-2026-69482Windows Error Reporting Tampering VulnerabilityCVE-2026-69481Windows Enterprise App Management Elevation of Privilege VulnerabilityCVE-2026-69480Windows Partition Management Driver Elevation of Privilege VulnerabilityCVE-2026-69479Windows NTFS Remote Code Execution VulnerabilityCVE-2026-69478Windows Device Association Service Elevation of Privilege VulnerabilityCVE-2026-69477Microsoft Office Access Remote Code Execution VulnerabilityCVE-2026-69476Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69475Windows Remote Desktop Services Elevation of Privilege VulnerabilityCVE-2026-69474Windows Overlay Filter Information Disclosure VulnerabilityCVE-2026-69473Windows Kernel Elevation of Privilege VulnerabilityCVE-2026-69472Windows Devices Human Interface Elevation of Privilege VulnerabilityCVE-2026-69470Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityCVE-2026-69469Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityCVE-2026-69468Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityCVE-2026-69467Microsoft Graphics Component Elevation of Privilege VulnerabilityCVE-2026-69466Windows Kernel Elevation of Privilege VulnerabilityCVE-2026-69465Microsoft Office SharePoint Remote Code Execution VulnerabilityCVE-2026-69464Microsoft Office SharePoint Elevation of Privilege VulnerabilityCVE-2026-69463Windows NTFS Remote Code Execution VulnerabilityCVE-2026-69462Windows Error Reporting Elevation of Privilege VulnerabilityCVE-2026-69461Windows NTFS Remote Code Execution VulnerabilityCVE-2026-69460Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityCVE-2026-69459Windows Power Dependency Coordinator Elevation of Privilege VulnerabilityCVE-2026-69458Windows BitLocker Elevation of Privilege VulnerabilityCVE-2026-69457Windows USB Driver Information Disclosure VulnerabilityCVE-2026-69456Microsoft Windows Speech Elevation of Privilege VulnerabilityCVE-2026-69455Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2026-69453Microsoft Windows Search Component Tampering VulnerabilityCVE-2026-69451Windows Management Instrumentation Elevation of Privilege VulnerabilityCVE-2026-69450Windows Error Reporting Elevation of Privilege VulnerabilityCVE-2026-69449Windows BitLocker Remote Code Execution VulnerabilityCVE-2026-69448Windows Bluetooth Service Elevation of Privilege VulnerabilityCVE-2026-69447Windows Audio Service Elevation of Privilege VulnerabilityCVE-2026-69445Windows Compressed Folder Elevation of Privilege VulnerabilityCVE-2026-69444Microsoft Windows Speech Elevation of Privilege VulnerabilityCVE-2026-69443Windows Device Health Attestation (DHA) Information Disclosure VulnerabilityCVE-2026-69442Microsoft Office Remote Code Execution VulnerabilityCVE-2026-69441Windows Installer Elevation of Privilege VulnerabilityCVE-2026-69440Windows MIDI Service Module Elevation of Privileges VulnerabilityCVE-2026-69439.NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2026-69438Microsoft JScript Remote Code Execution VulnerabilityCVE-2026-69436Windows Error Reporting Elevation of Privilege VulnerabilityCVE-2026-69434Windows URL Moniker Remote Code Execution VulnerabilityCVE-2026-69433Windows Error Reporting Elevation of Privilege VulnerabilityCVE-2026-69432Volume Manager Driver Elevation of Privilege VulnerabilityCVE-2026-69431Telnet Client Remote Code Execution VulnerabilityCVE-2026-69430Windows Embedded Mode Service Elevation of Privilege VulnerabilityCVE-2026-69429Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityCVE-2026-69428Windows LDAP – Lightweight Directory Access Protocol Denial of Service VulnerabilityCVE-2026-69427Microsoft VOLSNAP.SYS Elevation of Privilege VulnerabilityCVE-2026-69426Windows VOLSNAP.SYS Remote Code Execution VulnerabilityCVE-2026-69425Windows NTFS Tampering VulnerabilityCVE-2026-69424Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityCVE-2026-69423Windows USB Video Driver Elevation of Privilege VulnerabilityCVE-2026-69422Windows USB Video Driver Elevation of Privilege VulnerabilityCVE-2026-69421Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2026-69420Microsoft VOLSNAP.SYS Elevation of Privilege VulnerabilityCVE-2026-69418Volume Manager Driver Elevation of Privilege VulnerabilityCVE-2026-69417Microsoft Office SharePoint Spoofing VulnerabilityCVE-2026-69416Windows DHCP Server Denial of Service VulnerabilityCVE-2026-69415Windows DHCP Server Elevation of Privilege VulnerabilityCVE-2026-69413Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityCVE-2026-69412Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-69410Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69409Microsoft Office SharePoint Information Disclosure VulnerabilityCVE-2026-69408Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2026-69407Volume Manager Driver Elevation of Privilege VulnerabilityCVE-2026-69406Windows Kernel Information Disclosure VulnerabilityCVE-2026-69405Windows DHCP Server Denial of Service VulnerabilityCVE-2026-69404Windows TCP/IP Elevation of Privilege VulnerabilityCVE-2026-69403Windows SMB Server Information Disclosure VulnerabilityCVE-2026-69402Microsoft Office SharePoint Spoofing VulnerabilityCVE-2026-69401Audio Video Control Transport Protocol Elevation of Privilege VulnerabilityCVE-2026-69398Windows Bluetooth Service Elevation of Privilege VulnerabilityCVE-2026-69397Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityCVE-2026-69396Windows NDIS Elevation of Privilege VulnerabilityCVE-2026-69395Active Directory Certificate Services (AD CS) Information Disclosure VulnerabilityCVE-2026-69394Windows Audio Service Elevation of Privilege VulnerabilityCVE-2026-69393Windows Spaceport.sys Information Disclosure VulnerabilityCVE-2026-69392Windows Shell Elevation of Privilege VulnerabilityCVE-2026-69391Windows Broker Infrastructure Service Elevation of Privilege VulnerabilityCVE-2026-69390Windows Spaceport.sys Information Disclosure VulnerabilityCVE-2026-69389Windows Storage Management Provider Elevation of Privilege VulnerabilityCVE-2026-69388Windows Bluetooth Service Elevation of Privilege VulnerabilityCVE-2026-69386Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2026-69385Windows TCP/IP Elevation of Privilege VulnerabilityCVE-2026-69384Virtual Hard Disk (VHD) Miniport Driver Denial of Service VulnerabilityCVE-2026-69383Windows Shell Elevation of Privilege VulnerabilityCVE-2026-69382Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2026-69381Windows Storage Port Driver Information Disclosure VulnerabilityCVE-2026-69380Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2026-69379Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-69378Microsoft Exchange Server Denial of Service VulnerabilityCVE-2026-69377Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityCVE-2026-69376Microsoft Standard XPS Information Disclosure VulnerabilityCVE-2026-69375Microsoft Exchange Server Tampering VulnerabilityCVE-2026-69374Windows SMB Server Denial of Service VulnerabilityCVE-2026-69373Windows Overlay Filter Elevation of Privilege VulnerabilityCVE-2026-69372Windows Network File System Denial of Service VulnerabilityCVE-2026-69371Windows Overlay Filter Elevation of Privilege VulnerabilityCVE-2026-69369Windows DNS Information Disclosure VulnerabilityCVE-2026-69368Windows Overlay Filter Elevation of Privilege VulnerabilityCVE-2026-69367Microsoft Standard XPS Information Disclosure VulnerabilityCVE-2026-69366Windows Kernel Elevation of Privilege VulnerabilityCVE-2026-69365Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityCVE-2026-69364Windows Print Spooler Components Elevation of Privilege VulnerabilityCVE-2026-69362Windows Error Reporting Elevation of Privilege VulnerabilityCVE-2026-69361Microsoft Exchange Server Spoofing VulnerabilityCVE-2026-69360Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-69359Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2026-69358Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-69357Windows NDIS Elevation of Privilege VulnerabilityCVE-2026-69356Microsoft Exchange Server Spoofing VulnerabilityCVE-2026-69355Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2026-69353Windows Text Shaping Information Disclosure VulnerabilityCVE-2026-69352Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69351Windows Universal Plug and Play (UPnP) Device Host Information Disclosure VulnerabilityCVE-2026-69350Windows Overlay Filter Elevation of Privilege VulnerabilityCVE-2026-69349Windows Management Instrumentation Information Disclosure VulnerabilityCVE-2026-69348Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69347Windows Fast FAT Driver Remote Code Execution VulnerabilityCVE-2026-69346Windows Print Spooler Components Elevation of Privilege VulnerabilityCVE-2026-69345Microsoft Standard XPS Information Disclosure VulnerabilityCVE-2026-69344Windows Print Spooler Components Information Disclosure VulnerabilityCVE-2026-69343Windows Overlay Filter Information Disclosure VulnerabilityCVE-2026-69342Windows DHCP Server Denial of Service VulnerabilityCVE-2026-69341Windows Image Acquisition Elevation of Privilege VulnerabilityCVE-2026-69340Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-69339Windows MIDI Service Module Information Disclosure VulnerabilityCVE-2026-69338Remote Desktop Gateway Service Elevation of Privilege VulnerabilityCVE-2026-69337Windows Registry Elevation of Privilege VulnerabilityCVE-2026-69336Microsoft Standard XPS Elevation of Privilege VulnerabilityCVE-2026-69335Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69334Windows Volume Manager Extension Driver Remote Code Execution VulnerabilityCVE-2026-69333Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69332Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-69331Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2026-69329BranchCache Denial of Service VulnerabilityCVE-2026-69328Windows Storage Elevation of Privilege VulnerabilityCVE-2026-69325Microsoft JScript Remote Code Execution VulnerabilityCVE-2026-69324Windows Performance Monitor Elevation of Privilege VulnerabilityCVE-2026-69323Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69322Microsoft Windows Search Component Elevation of Privilege VulnerabilityCVE-2026-69321Windows Power Dependency Coordinator Tampering VulnerabilityCVE-2026-69319Windows USB Video Driver Elevation of Privilege VulnerabilityCVE-2026-69318Windows Imaging Component Information Disclosure VulnerabilityCVE-2026-69317Windows Remote Desktop Client Information Disclosure VulnerabilityCVE-2026-69316Windows Overlay Filter Information Disclosure VulnerabilityCVE-2026-69315Windows License Manager Information Disclosure VulnerabilityCVE-2026-69314Windows Device Association Broker Service Elevation of Privilege VulnerabilityCVE-2026-69313Microsoft Standard XPS Elevation of Privilege VulnerabilityCVE-2026-69312Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-69311Windows Audio Service Elevation of Privilege VulnerabilityCVE-2026-69310Windows DNS Elevation of Privilege VulnerabilityCVE-2026-69309Windows Print Spooler Components Elevation of Privilege VulnerabilityCVE-2026-69308Microsoft Standard XPS Information Disclosure VulnerabilityCVE-2026-69307Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityCVE-2026-69305Microsoft Windows Search Component Elevation of Privilege VulnerabilityCVE-2026-69304ASP.NET Core Denial of Service VulnerabilityCVE-2026-69303Push Message Routing Service Information Disclosure VulnerabilityCVE-2026-69301Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69300Windows Push Notifications Elevation of Privilege VulnerabilityCVE-2026-69299Microsoft COM for Windows Elevation of Privilege VulnerabilityCVE-2026-69298Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69297Windows DHCP Server Information Disclosure VulnerabilityCVE-2026-69296Windows Device Association Service Elevation of Privilege VulnerabilityCVE-2026-69295Windows USB Driver Elevation of Privilege VulnerabilityCVE-2026-69294Microsoft COM for Windows Information Disclosure VulnerabilityCVE-2026-69293Windows Biometric Service Elevation of Privilege VulnerabilityCVE-2026-69292Remote Desktop Gateway Service Elevation of Privilege VulnerabilityCVE-2026-69291Windows Volume Manager Extension Driver Remote Code Execution VulnerabilityCVE-2026-69290Windows Storage Spaces Controller Elevation of Privilege VulnerabilityCVE-2026-69289Windows Setup Files Cleanup Elevation of Privilege VulnerabilityCVE-2026-69288Windows GDI+ Information Disclosure VulnerabilityCVE-2026-69287Windows Remote Desktop Services Elevation of Privilege VulnerabilityCVE-2026-69286Windows USB Audio Class Driver Information Disclosure VulnerabilityCVE-2026-69285Microsoft Office Remote Code Execution VulnerabilityCVE-2026-69284Windows DCOM Server Elevation of Privilege VulnerabilityCVE-2026-69283Windows CD-ROM Driver Elevation of Privilege VulnerabilityCVE-2026-69282Microsoft Office SharePoint Remote Code Execution VulnerabilityCVE-2026-69281Windows License Manager Elevation of Privilege VulnerabilityCVE-2026-69280Windows Push Notifications Elevation of Privilege VulnerabilityCVE-2026-69279Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2026-69277Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityCVE-2026-69276Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution VulnerabilityCVE-2026-69275Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityCVE-2026-69274Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-69273Microsoft Office SharePoint Remote Code Execution VulnerabilityCVE-2026-69272Microsoft Standard XPS Elevation of Privilege VulnerabilityCVE-2026-69271Microsoft Standard XPS Elevation of Privilege VulnerabilityCVE-2026-69270Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityCVE-2026-69269Microsoft Standard XPS Elevation of Privilege VulnerabilityCVE-2026-69268Microsoft Office SharePoint Remote Code Execution VulnerabilityCVE-2026-69267Windows Connected User Experiences and Telemetry Information Disclosure VulnerabilityCVE-2026-69266Windows DHCP Server Remote Code Execution VulnerabilityCVE-2026-69265Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-68898Windows iSCSI Denial of Service VulnerabilityCVE-2026-68897Microsoft Standard XPS Elevation of Privilege VulnerabilityCVE-2026-68896Microsoft Windows Search Component Elevation of Privilege VulnerabilityCVE-2026-68895Internet Storage Name Service Information Disclosure VulnerabilityCVE-2026-68894Windows Error Reporting Elevation of Privilege VulnerabilityCVE-2026-68893Remote Desktop Licensing Service Elevation of Privilege VulnerabilityCVE-2026-68892Microsoft Standard XPS Elevation of Privilege VulnerabilityCVE-2026-68891Microsoft Standard XPS Information Disclosure VulnerabilityCVE-2026-68890Microsoft Standard XPS Elevation of Privilege VulnerabilityCVE-2026-68889Microsoft Standard XPS Elevation of Privilege VulnerabilityCVE-2026-68888Microsoft Standard XPS Elevation of Privilege VulnerabilityCVE-2026-68887Windows Message Queuing Queue Manager Denial of Service VulnerabilityCVE-2026-68886Windows Network Connection Broker Information Disclosure VulnerabilityCVE-2026-68885Microsoft Standard XPS Elevation of Privilege VulnerabilityCVE-2026-68884Windows Kernel Elevation of Privilege VulnerabilityCVE-2026-68881Microsoft Standard XPS Information Disclosure VulnerabilityCVE-2026-68880Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-68878Windows Fast FAT Driver Elevation of Privilege VulnerabilityCVE-2026-68877Windows Storage Spaces Controller Remote Code Execution VulnerabilityCVE-2026-68876Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityCVE-2026-68875Windows NTFS Remote Code Execution VulnerabilityCVE-2026-68874Windows Program Compatibility Assistant Service Information Disclosure VulnerabilityCVE-2026-68873Windows Program Compatibility Assistant Service Information Disclosure VulnerabilityCVE-2026-68852Microsoft Account Information Disclosure VulnerabilityCVE-2026-68851Windows NTFS Information Disclosure VulnerabilityCVE-2026-68850Microsoft Account Elevation of Privilege VulnerabilityCVE-2026-68849Windows Bluetooth Port Driver Information Disclosure VulnerabilityCVE-2026-68848Windows Print Spooler Components Elevation of Privilege VulnerabilityCVE-2026-68847Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityCVE-2026-68846Windows Kernel Elevation of Privilege VulnerabilityCVE-2026-68845Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityCVE-2026-68844Windows Storage Spaces Controller Remote Code Execution VulnerabilityCVE-2026-68843Microsoft Office Word Information Disclosure VulnerabilityCVE-2026-68842Windows MIDI Service Module Information Disclosure VulnerabilityCVE-2026-68841Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-68840Windows USB Driver Elevation of Privilege VulnerabilityCVE-2026-68839Windows USB Mass Storage Class Driver Remote Code Execution VulnerabilityCVE-2026-68838Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-68837Windows File History Service Elevation of Privilege VulnerabilityCVE-2026-68835Windows Print Spooler Components Elevation of Privilege VulnerabilityCVE-2026-68834Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-68833Windows NTFS Remote Code Execution VulnerabilityCVE-2026-68832Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-68831Windows Defender Firewall Service Information Disclosure VulnerabilityCVE-2026-68830Windows Universal Plug and Play (UPnP) Device Host Information Disclosure VulnerabilityCVE-2026-68828Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-68827Windows GDI+ Elevation of Privilege VulnerabilityCVE-2026-68825Windows Bind Filter Driver Elevation of Privilege VulnerabilityCVE-2026-68824Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityCVE-2026-68787Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-68786Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-68785Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-68784Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-68781Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-68780Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-68779Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-68778Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-68777Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-68776Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-68775Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67648Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-67645Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-67643Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67642Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67641Microsoft SQL Server Denial of Service VulnerabilityCVE-2026-67639Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67638Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67636Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67633Microsoft SQL Server Denial of Service VulnerabilityCVE-2026-67631Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67630Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-67629Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-67624Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-67393Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-67390Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-67389Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-67388Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67386Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-67385Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67384Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67383Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-67381Microsoft SQL Server Elevation of Privilege VulnerabilityCVE-2026-67380Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67379Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67378Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67376Microsoft SQL Server Denial of Service VulnerabilityCVE-2026-67373Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2026-67370Microsoft SQL Server Elevation of Privilege VulnerabilityCVE-2026-67369Microsoft SQL Server Information Disclosure VulnerabilityCVE-2026-67368Microsoft SQL Server Elevation of Privilege VulnerabilityCVE-2026-66820SQL Server Elevation of Privilege VulnerabilityCVE-2026-66819Microsoft SQL Server Elevation of Privilege VulnerabilityCVE-2026-66818Microsoft SQL Server Elevation of Privilege VulnerabilityCVE-2026-66816Microsoft SQL Server Security Feature Bypass VulnerabilityCVE-2026-66814Microsoft SQL Server Elevation of Privilege VulnerabilityCVE-2026-66308Skype for Business and Lync Denial of Service VulnerabilityCVE-2026-66307Skype for Business and Lync Denial of Service VulnerabilityCVE-2026-66306Skype for Business Information Disclosure VulnerabilityCVE-2026-66305Skype for Business Spoofing VulnerabilityCVE-2026-66304Skype for Business Information Disclosure VulnerabilityCVE-2026-66303Skype for Business and Lync Denial of Service VulnerabilityCVE-2026-66302Skype for Business Remote Code Execution VulnerabilityCVE-2026-65818Power Automate Elevation of Privilege VulnerabilityCVE-2026-65812Microsoft Teams for Android Information Disclosure VulnerabilityCVE-2026-65772Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCVE-2026-65669Microsoft SQL Server Elevation of Privilege VulnerabilityCVE-2026-64918Microsoft Office Spoofing VulnerabilityCVE-2026-63523Skype for Business Spoofing VulnerabilityCVE-2026-62916Microsoft Entra ID Elevation of Privilege VulnerabilityCVE-2026-62906Microsoft Discovery Studio Information Disclosure VulnerabilityCVE-2026-62895Azure Arc SQL Server Extension Elevation of Privilege VulnerabilityCVE-2026-62813Windows Active Directory Domain Services Remote Code Execution VulnerabilityCVE-2026-62810Active Directory Certificate Services (AD CS) Elevation of Privilege VulnerabilityCVE-2026-62804Microsoft Word Remote Code Execution VulnerabilityCVE-2026-62801Microsoft PowerShell Security Feature Bypass VulnerabilityCVE-2026-62762Windows Active Directory Domain Services Denial of Service VulnerabilityCVE-2026-62759Windows Netlogon Spoofing VulnerabilityCVE-2026-62744Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2026-62706Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2026-62697Windows Push Notifications Elevation of Privilege VulnerabilityCVE-2026-62694Windows Installer Elevation of Privilege VulnerabilityCVE-2026-58649.NET Information Disclosure VulnerabilityCVE-2026-58611Xbox Gaming Services Elevation of Privilege VulnerabilityCVE-2026-58600HEVC Video Extensions Elevation of Privilege VulnerabilityCVE-2026-58599HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2026-57099ASP.NET Core Denial of Service VulnerabilityCVE-2026-57098Microsoft Remote Desktop App for Windows Information Disclosure VulnerabilityCVE-2026-56198Microsoft Trace Data Helper Elevation of Privilege VulnerabilityCVE-2026-56177Windows Server Elevation of Privilege VulnerabilityCVE-2026-56172Windows VHD miniport driver Elevation of Privilege VulnerabilityCVE-2026-55007Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2026-50349Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2026-47297Microsoft SQL Server Remote Code Execution Vulnerability

Text extracted automatically; images, tables and formatting may be missing. Original: https://gbhackers.com/microsoft-september-2026-patch-tuesday/