The September 2026 Security Update Review

Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there’s a phrase from my military days that comes to mind: embrace the suck. Take an extended break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here: Adobe Patches for September 2026 For the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program. Here’s this month’s overview table: Adobe Patches for September 2026 Adobe Patches for September 2026 Bulletin ID Product CVE Count Highest Severity Highest CVSS Exploited Deployment Priority APSB26-146 Adobe Commerce 1 Critical 10.0 Yes 1 APSB26-142 Adobe Campaign Classic 1 Critical 10.0 No 1 APSB26-119 Adobe ColdFusion 9 Critical 9.9 No 1 APSB26-98 Adobe Experience Manager 107 Critical 9.9 No 2 APSB26-138 Adobe Commerce 8 Critical 9.3 No 2 APSB26-141 Adobe Acrobat and Reader 32 Critical 8.8 No 2 APSB26-130 Adobe Photoshop 8 Critical 8.6 No 3 APSB26-131 Adobe Illustrator 3 Critical 8.6 No 3 APSB26-132 Adobe Animate 1 Critical 8.2 No 3 APSB26-136 Adobe Photoshop Mobile 2 Important 7.4 No 3 TOTAL 10 bulletins 172 APSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin. Clearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2. Besides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release. Microsoft Patches for September 2026 It’s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that’s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important. To provide a little historical context on how many CVEs have been patched by Microsoft this year, let’s take a look at some year-over-year totals: On the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits – yet.   As always, we’ll start with the bugs under active attack and move on from there.   -              CVE-2026-81963 - Windows Update Stack Elevation of Privilege Vulnerability This is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly. -              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability This is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don’t know how widespread these exploits may be, so assume they are coming for you and patch quickly. -              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution Vulnerability There are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail – no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.  -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege Vulnerability This is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one. -              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution Vulnerability I count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn’t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker’s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly. -              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege Vulnerability Speaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there’s the user interaction component, but if they succeed, the attacker could gain access to the database at the user’s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet. -              CVE-2026-69525 - Remote Desktop Services Remote Code Execution Vulnerability This CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an “in-network attacker”, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest. So where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order): CVE-2026-69510 – Windows DHCP Server Remote Code Execution Vulnerability CVE-2026-69524 – Windows Active Directory Domain Services Remote Code Execution Vulnerability CVE-2026-69530 – Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability CVE-2026-69579 – Windows Message Queuing Remote Code Execution Vulnerability CVE-2026-69590 – Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2026-69595 – Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability CVE-2026-69730 – Windows DNS Server Remote Code Execution Vulnerability (SigRed’s spiritual successor) CVE-2026-69858 – Windows DNS Server Remote Code Execution Vulnerability CVE-2026-72936 – Windows SMB Client Remote Code Execution Vulnerability CVE-2026-72979 – Windows DHCP Server Remote Code Execution Vulnerability CVE-2026-72981 – IP Helper Remote Code Execution Vulnerability CVE-2026-72982 – Windows Netlogon Remote Code Execution Vulnerability CVE-2026-72983 – Internet Connection Sharing (ICS) Remote Code Execution Vulnerability CVE-2026-72987 – Windows DNS Remote Code Execution Vulnerability CVE-2026-73009 – Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability CVE-2026-73010 – Microsoft Failover Cluster Remote Code Execution Vulnerability CVE-2026-78444 – Microsoft Failover Cluster Remote Code Execution Vulnerability CVE-2026-78449 – Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability CVE-2026-78450 – Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability CVE-2026-83997 – Windows Message Queuing Remote Code Execution Vulnerability Here’s the full list of CVEs released by Microsoft for September 2026: CVE Title Severity CVSS Public Exploited Type CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Important 7.8 No Yes EoP CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability Important 7.8 No Yes EoP CVE-2026-70352 ** Azure AI Language Elevation of Privilege Vulnerability Critical 10 No No EoP CVE-2026-69857 ** Azure Cosmos DB Spoofing Vulnerability Critical 8.5 No No Spoofing CVE-2026-80098 ** Copilot Studio Elevation of Privilege Vulnerability Critical 9.3 No No EoP CVE-2026-73006 DirectWrite Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-83941 ** Entra ID Elevation of Privilege Vulnerability Critical 9.9 No No EoP CVE-2026-72986 Graphic Fonts Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-73018 Graphic Fonts Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-73017 Graphics Kernel Remote Code Execution Vulnerability Critical 7.5 No No RCE CVE-2026-58599 HEVC Video Extensions Remote Code Execution Vulnerability Critical 7.8 No No RCE CVE-2026-72981 IP Helper Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-72983 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-83711 ** Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability Critical 10 No No EoP CVE-2026-62906 ** Microsoft Discovery Studio Information Disclosure Vulnerability Critical 7.4 No No Info CVE-2026-65772 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-62916 ** Microsoft Entra ID Elevation of Privilege Vulnerability Critical 9.1 No No EoP CVE-2026-81948 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE CVE-2026-81949 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE CVE-2026-81950 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE CVE-2026-81951 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE CVE-2026-81953 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE CVE-2026-81959 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE CVE-2026-70178 ** Microsoft Fabric Elevation of Privilege Vulnerability Critical 8.5 No No EoP CVE-2026-73010 Microsoft Failover Cluster Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-78444 Microsoft Failover Cluster Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-78439 Microsoft Office Graphics Component Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-78520 Microsoft Office Outlook Information Disclosure Vulnerability Critical 6.5 No No Info CVE-2026-78509 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-78519 Microsoft Office Outlook Remote Code Execution Vulnerability Critical No No RCE CVE-2026-78525 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69678 Microsoft Office PowerPoint Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69767 Microsoft Office PowerPoint Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69797 Microsoft Office PowerPoint Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69285 Microsoft Office Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69632 Microsoft Office Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-77898 Microsoft Office Remote Code Execution Vulnerability Critical 7.5 No No RCE CVE-2026-78505 Microsoft Office Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-77504 Microsoft Office Word Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-65669 Microsoft SQL Server Elevation of Privilege Vulnerability Critical 9.6 No No EoP CVE-2026-67378 Microsoft SQL Server Remote Code Execution Vulnerability Critical 8.5 No No RCE CVE-2026-67631 Microsoft SQL Server Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-67636 Microsoft SQL Server Remote Code Execution Vulnerability Critical 8.5 No No RCE CVE-2026-67643 Microsoft SQL Server Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-70351 Microsoft WebP Image Extension Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69601 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-78510 Microsoft Word Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-81952 Microsoft Word Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-65818 ** Power Automate Elevation of Privilege Vulnerability Critical 8.5 No No EoP CVE-2026-69649 Raw Image Extension Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-66302 Skype for Business Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-69854 Spring Cloud Azure Elevation of Privilege Vulnerability Critical 9 No No EoP CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability Critical 7.5 No No RCE CVE-2026-81352 Web Media Extensions Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69874 Windows ALPC Elevation of Privilege Vulnerability Critical 8.2 No No EoP CVE-2026-72958 Windows Credential Guard Elevation of Privilege Vulnerability Critical 8.2 No No EoP CVE-2026-69845 Windows DHCP Server Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-72979 Windows DHCP Server Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-72987 Windows DNS Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-69730 Windows DNS Server Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-69813 Windows DNS Server Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-69827 Windows DNS Server Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-69858 Windows DNS Server Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-77505 Windows DNS Server Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-72954 Windows Deployment Services Remote Code Execution Vulnerability Critical 7.5 No No RCE CVE-2026-72957 Windows Deployment Services Remote Code Execution Vulnerability Critical 7.8 No No RCE CVE-2026-77493 Windows Graphics Component Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-81955 Windows Graphics Component Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69769 Windows HTTP Print Provider Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-69710 Windows Hello Elevation of Privilege Vulnerability Critical 7.5 No No EoP CVE-2026-69725 Windows Hello Elevation of Privilege Vulnerability Critical 7.8 No No EoP CVE-2026-69740 Windows Hello Elevation of Privilege Vulnerability Critical 8.8 No No EoP CVE-2026-69784 Windows Hello Elevation of Privilege Vulnerability Critical 8.8 No No EoP CVE-2026-69799 Windows Hello Elevation of Privilege Vulnerability Critical 7.8 No No EoP CVE-2026-69820 Windows Hello Elevation of Privilege Vulnerability Critical 8.2 No No EoP CVE-2026-69864 Windows Hello Elevation of Privilege Vulnerability Critical 7.8 No No EoP CVE-2026-81354 Windows Hello Elevation of Privilege Vulnerability Critical 8.2 No No EoP CVE-2026-72980 Windows Hello Security Feature Bypass Vulnerability Critical 4.4 No No SFB CVE-2026-72961 Windows Hyper-V Elevation of Privilege Vulnerability Critical 8.2 No No EoP CVE-2026-69603 Windows Hyper-V Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-80083 Windows Hyper-V Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69499 Windows Imaging Component Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-70296 Windows Imaging Component Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-73013 Windows Imaging Component Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-73023 Windows Imaging Component Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-77495 Windows Imaging Component Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69676 Windows Kerberos Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-70203 Windows Media Player Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-72960 Windows Media Player Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69579 Windows Message Queuing Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-72982 Windows Netlogon Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-70586 Windows Paint Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69530 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-78449 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-78450 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Critical 8.1 No No RCE CVE-2026-69518 Windows Remote Desktop Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-69852 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Critical 7.5 No No RCE CVE-2026-72950 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-72959 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Critical 8.8 No No RCE CVE-2026-69501 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Critical 7 No No EoP CVE-2026-69846 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Critical 8.2 No No EoP CVE-2026-69906 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Critical 8.2 No No EoP CVE-2026-83939 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Critical 8.2 No No EoP CVE-2026-73009 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-69595 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-70585 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Critical 7 No No RCE CVE-2026-78445 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-69829 Windows Shell Remote Code Execution Vulnerability Critical 9.8 No No RCE CVE-2026-72962 Windows USB Video Driver Elevation of Privilege Vulnerability Critical 8.2 No No EoP CVE-2026-69890 Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability Critical 7.5 No No EoP CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Critical 7.8 No No EoP CVE-2026-83501 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability Critical 5.5 No No Info CVE-2026-69805 .NET Elevation of Privilege Vulnerability Important 7.5 No No EoP CVE-2026-69806 .NET Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-58649 .NET Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-71328 .NET and Visual Studio Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-57099 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69304 ASP.NET Core Denial of Service Vulnerability Important 5.9 No No DoS CVE-2026-62810 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69821 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69395 Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69624 Active Directory Certificate Services (AD CS) Tampering Vulnerability Important 6.5 No No Tampering CVE-2026-69359 Active Directory Domain Services Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72978 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Important 5.9 No No DoS CVE-2026-69401 Audio Video Control Transport Protocol Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-62895 Azure Arc SQL Server Extension Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-77909 Azure CycleCloud Information Disclosure Vulnerability Important 7.7 No No Info CVE-2026-81349 Azure HDInsight Ambari Elevation of Privilege Vulnerability Important 7.2 No No EoP CVE-2026-69329 BranchCache Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69516 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-68847 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69470 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69625 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-73014 Data Sharing Service Client Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-73016 DirectWrite Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-81380 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability Important 5.3 No No Info CVE-2026-81381 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69576 Graphic Fonts Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-81353 HEIF Image Extensions Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-58600 HEVC Video Extensions Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69731 HID Class Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68895 Internet Storage Name Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69275 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69900 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68850 Microsoft Account Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68852 Microsoft Account Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-84003 Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability Important 7.4 No No Spoofing CVE-2026-80097 Microsoft Authenticator Elevation of Privilege Vulnerability Important 8.6 No No EoP CVE-2026-83948 Microsoft Azure CLI Remote Code Execution Vulnerability Important 8 No No RCE CVE-2026-69299 Microsoft COM for Windows Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69294 Microsoft COM for Windows Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69491 Microsoft DirectMusic Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-77908 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-81387 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81390 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81391 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81392 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81393 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81394 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81395 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81399 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81400 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81401 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81958 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-81386 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-81388 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-81389 Microsoft Excel Remote Code Execution Vulnerability Important 7 No No RCE CVE-2026-81396 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-81397 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-81398 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-81947 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-81954 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-81956 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-81957 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-81960 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-69378 Microsoft Exchange Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69380 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 8.1 No No EoP CVE-2026-69641 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 9.1 No No EoP CVE-2026-69382 Microsoft Exchange Server Information Disclosure Vulnerability Important 5.9 No No Info CVE-2026-55007 Microsoft Exchange Server Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69355 Microsoft Exchange Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69356 Microsoft Exchange Server Spoofing Vulnerability Important 9.3 No No Spoofing CVE-2026-69361 Microsoft Exchange Server Spoofing Vulnerability Important 6.5 No No Spoofing CVE-2026-69375 Microsoft Exchange Server Tampering Vulnerability Important 6.5 No No Tampering CVE-2026-69467 Microsoft Graphics Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83990 Microsoft Graphics Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-84000 Microsoft Graphics Component Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-69605 Microsoft Install Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69325 Microsoft JScript Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69438 Microsoft JScript Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69277 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69365 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69594 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69477 Microsoft Office Access Remote Code Execution Vulnerability Important 7.3 No No RCE CVE-2026-69529 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69614 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69778 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-72974 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-78515 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-85875 Microsoft Office Excel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-78518 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69626 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69739 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-80076 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-80078 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-80082 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-80087 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-80089 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-80091 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-80073 Microsoft Office Outlook Information Disclosure Vulnerability Important No No Info CVE-2026-80084 Microsoft Office Outlook Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69629 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-72938 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-72956 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-72975 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-72977 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-78513 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-80086 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-80081 Microsoft Office PowerPoint Remote Code Execution Vulnerability Important No No RCE CVE-2026-69742 Microsoft Office Publisher Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-81385 Microsoft Office Publisher Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69442 Microsoft Office Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69464 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-69716 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-69409 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69636 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69683 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69904 Microsoft Office SharePoint Information Disclosure Vulnerability Important 3.5 No No Info CVE-2026-69268 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69273 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69282 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69465 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69724 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69804 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69402 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No Spoofing CVE-2026-69417 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No Spoofing CVE-2026-69615 Microsoft Office SharePoint Spoofing Vulnerability Important 3.5 No No Spoofing CVE-2026-69690 Microsoft Office SharePoint Spoofing Vulnerability Important 4.6 No No Spoofing CVE-2026-64918 Microsoft Office Spoofing Vulnerability Important 6.5 No No Spoofing CVE-2026-68843 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69719 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69734 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-72976 Microsoft Office Word Information Disclosure Vulnerability Important 5 No No Info CVE-2026-77911 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-78502 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-78503 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-78506 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-78522 Microsoft Office Word Information Disclosure Vulnerability Important No No Info CVE-2026-80079 Microsoft Office Word Information Disclosure Vulnerability Important No No Info CVE-2026-80088 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-80090 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-83949 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83951 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69360 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69556 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69671 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69686 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69722 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69759 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69764 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-72972 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-72973 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-77901 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-78504 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-78507 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-78511 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-78512 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-78514 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-78521 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-78526 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-80080 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-80085 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69397 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-77897 Microsoft Power Automate Desktop Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-62801 Microsoft PowerShell Security Feature Bypass Vulnerability Important 6.5 No No SFB CVE-2026-57098 Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-67376 Microsoft SQL Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-67633 Microsoft SQL Server Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-67641 Microsoft SQL Server Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-66814 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-66818 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-66819 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-67368 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-67370 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-67381 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-67369 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-67383 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-67386 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-67389 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-67390 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-67393 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-67624 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-67629 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-67630 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-67645 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-67648 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-68776 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-68777 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-68778 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-68779 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-68780 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-68781 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-68784 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69562 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-73029 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-77488 Microsoft SQL Server Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-47297 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-67373 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-67379 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.5 No No RCE CVE-2026-67380 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-67384 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-67385 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-67388 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-67638 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-67639 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-67642 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-68775 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-68785 Microsoft SQL Server Remote Code Execution Vulnerability Important 4.9 No No RCE CVE-2026-68786 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-68787 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-77481 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-77482 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-77484 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-77486 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-66816 Microsoft SQL Server Security Feature Bypass Vulnerability Important 6.5 No No SFB CVE-2026-68885 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68888 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68889 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-68890 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68892 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68897 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69269 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69271 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69272 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69313 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69336 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-68881 Microsoft Standard XPS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-68891 Microsoft Standard XPS Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-69308 Microsoft Standard XPS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69345 Microsoft Standard XPS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69367 Microsoft Standard XPS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69376 Microsoft Standard XPS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69824 Microsoft Standard XPS Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-72946 Microsoft Storage Port Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-65812 Microsoft Teams for Android Information Disclosure Vulnerability Important 6.8 No No Info CVE-2026-69559 Microsoft Teams for Android Information Disclosure Vulnerability Important 5.8 No No Info CVE-2026-56198 Microsoft Trace Data Helper Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69276 Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69420 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69427 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-72933 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-62706 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-62744 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69386 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69408 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69511 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69586 Microsoft Windows PDF Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-78451 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-78452 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability Important 4.6 No No Info CVE-2026-78453 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-68896 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69305 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69585 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69600 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69608 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69911 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69507 Microsoft Windows Search Component Information Disclosure Vulnerability Important 5.7 No No Info CVE-2026-70145 Microsoft Windows Search Component Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69453 Microsoft Windows Search Component Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-69554 Microsoft Windows Search Component Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-69444 Microsoft Windows Speech Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69456 Microsoft Windows Speech Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69531 Microsoft Windows Speech Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-62804 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-69807 PowerShell Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69303 Push Message Routing Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69819 RPC Runtime Library Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-68828 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69358 Remote Desktop Client Remote Code Execution Vulnerability Important 7.1 No No RCE CVE-2026-69485 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-78463 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-80074 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-80077 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-83998 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69292 Remote Desktop Gateway Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69338 Remote Desktop Gateway Service Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-68893 Remote Desktop Licensing Service Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69514 Remote Desktop Services Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69525 Remote Desktop Services Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69536 Remote Desktop Services Remote Code Execution Vulnerability Important 7.1 No No RCE CVE-2026-69539 Remote Desktop Services Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69599 Remote Desktop Services Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69509 Role: Windows Fax Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69621 Role: Windows Fax Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-72944 Role: Windows Fax Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-66820 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-73028 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-77480 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-77483 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-77485 SQL Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-77487 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-78456 SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-66304 Skype for Business Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-66306 Skype for Business Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-63523 Skype for Business Spoofing Vulnerability Important 6.5 No No Spoofing CVE-2026-66305 Skype for Business Spoofing Vulnerability Important 7.1 No No Spoofing CVE-2026-69642 Skype for Business Spoofing Vulnerability Important 6.5 No No Spoofing CVE-2026-69646 Skype for Business Spoofing Vulnerability Important 8.3 No No Spoofing CVE-2026-66303 Skype for Business and Lync Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-66307 Skype for Business and Lync Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-66308 Skype for Business and Lync Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-69568 Storage Spaces Controller Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69431 Telnet Client Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69384 Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability Important 7.1 No No DoS CVE-2026-69541 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 7.8 No No EoP CVE-2026-69549 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 7 No No EoP CVE-2026-69611 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 7 No No EoP CVE-2026-69681 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 8 No No EoP CVE-2026-70574 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 7.8 No No EoP CVE-2026-81383 Visual Studio Code Information Disclosure Vulnerability Important 7.4 No No Info CVE-2026-70334 Visual Studio Code Security Feature Bypass Vulnerability Important 7.8 No No SFB CVE-2026-78461 Visual Studio Code Security Feature Bypass Vulnerability Important 7.4 No No SFB CVE-2026-78462 Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No SFB CVE-2026-81356 Visual Studio Code Security Feature Bypass Vulnerability Important 8.2 No No SFB CVE-2026-81357 Visual Studio Code Security Feature Bypass Vulnerability Important 8.2 No No SFB CVE-2026-81376 Visual Studio Code Security Feature Bypass Vulnerability Important 9.6 No No SFB CVE-2026-81378 Visual Studio Code Security Feature Bypass Vulnerability Important 8.2 No No SFB CVE-2026-81379 Visual Studio Code Security Feature Bypass Vulnerability Important 8.2 No No SFB CVE-2026-81377 Visual Studio Code Tampering Vulnerability Important 6.5 No No Tampering CVE-2026-77906 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-77907 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69407 Volume Manager Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69418 Volume Manager Driver Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69432 Volume Manager Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72985 Volume Shadow Copy Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-69609 Win32k Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69808 Win32k Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69832 Win32k Information Disclosure Vulnerability Important 5.6 No No Info CVE-2026-69853 Win32k Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-70290 Win32k Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70565 Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69834 Windows ALPC Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69654 Windows Accounts Control Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69816 Windows Accounts Control Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-62762 Windows Active Directory Domain Services Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-69809 Windows Active Directory Domain Services Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-62813 Windows Active Directory Domain Services Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69524 Windows Active Directory Domain Services Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69546 Windows Active Directory Domain Services Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-50349 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70342 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 8.1 No No EoP CVE-2026-69311 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69394 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69447 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69540 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69604 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69692 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69801 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70562 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-73005 Windows Authentication Methods Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-73004 Windows Autopilot Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69293 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69298 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69323 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69352 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69476 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69489 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69580 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69583 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69589 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69593 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69727 Windows Biometric Service Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69738 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69773 Windows Biometric Service Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69787 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69826 Windows Biometric Service Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-70572 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70573 Windows Biometric Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70581 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72941 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72988 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72990 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72991 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72992 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72993 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72994 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72995 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72996 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72997 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-73000 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-73001 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-73002 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-73007 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-73011 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-73015 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-73020 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-73021 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-73026 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-77489 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-78447 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-78448 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83954 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83955 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83967 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83968 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83969 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83970 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83971 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83972 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83973 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83974 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83975 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83976 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83977 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83978 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83979 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83980 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83981 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83982 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83983 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83985 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83986 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83987 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83988 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-73008 Windows Biometric Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69458 Windows BitLocker Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69449 Windows BitLocker Remote Code Execution Vulnerability Important 6.7 No No RCE CVE-2026-69817 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-68849 Windows Bluetooth Port Driver Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-69388 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69398 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69448 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69889 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-77892 Windows Boot Manager Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-69735 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69391 Windows Broker Infrastructure Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69283 Windows CD-ROM Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69561 Windows CD-ROM Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-78454 Windows CD-ROM Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-78508 Windows CD-ROM Driver Information Disclosure Vulnerability Important 4.6 No No Info CVE-2026-69542 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69279 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-80093 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83991 Windows Cloud Files Mini Filter Driver Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-69445 Windows Compressed Folder Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70019 Windows Compressed Folder Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69496 Windows Compressed Folder Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69267 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69771 Windows Container Manager Service Security Feature Bypass Vulnerability Important 4.7 No No SFB CVE-2026-70583 Windows Core Messaging Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70584 Windows Core Messaging Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70578 Windows Credential Guard Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69790 Windows Credential Providers Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69814 Windows Credential Providers Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69729 Windows Credential Providers Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69284 Windows DCOM Server Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69781 Windows DHCP Client Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-69777 Windows DHCP Client Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69342 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69405 Windows DHCP Server Denial of Service Vulnerability Important 5.7 No No DoS CVE-2026-69416 Windows DHCP Server Denial of Service Vulnerability Important 5.7 No No DoS CVE-2026-69497 Windows DHCP Server Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-69637 Windows DHCP Server Denial of Service Vulnerability Important 5.7 No No DoS CVE-2026-69679 Windows DHCP Server Denial of Service Vulnerability Important 5.7 No No DoS CVE-2026-70065 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-77494 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-77498 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-77499 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-77501 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-77502 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-77886 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-77888 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-77889 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-77890 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-77893 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-77895 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69415 Windows DHCP Server Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-69297 Windows DHCP Server Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69803 Windows DHCP Server Information Disclosure Vulnerability Important 5.9 No No Info CVE-2026-69929 Windows DHCP Server Information Disclosure Vulnerability Important 5.9 No No Info CVE-2026-69930 Windows DHCP Server Information Disclosure Vulnerability Important 5.9 No No Info CVE-2026-70124 Windows DHCP Server Information Disclosure Vulnerability Important 5.9 No No Info CVE-2026-69266 Windows DHCP Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69412 Windows DHCP Server Remote Code Execution Vulnerability Important 8 No No RCE CVE-2026-69510 Windows DHCP Server Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69547 Windows DHCP Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69620 Windows DHCP Server Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69847 Windows DHCP Server Remote Code Execution Vulnerability Important 8 No No RCE CVE-2026-69876 Windows DHCP Server Remote Code Execution Vulnerability Important 8 No No RCE CVE-2026-69878 Windows DHCP Server Remote Code Execution Vulnerability Important 6.4 No No RCE CVE-2026-77887 Windows DHCP Server Remote Code Execution Vulnerability Important 6.4 No No RCE CVE-2026-77891 Windows DHCP Server Remote Code Execution Vulnerability Important 6.4 No No RCE CVE-2026-69631 Windows DNS Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-70091 Windows DNS Denial of Service Vulnerability Important 5.9 No No DoS CVE-2026-69310 Windows DNS Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-72948 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No EoP CVE-2026-69369 Windows DNS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69672 Windows DNS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-78523 Windows DNS Server Denial of Service Vulnerability Important 5.9 No No DoS CVE-2026-69551 Windows DNS Server Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69782 Windows DNS Server Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69989 Windows DNS Server Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-72928 Windows DNS Server Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69680 Windows DNS Spoofing Vulnerability Important 8.1 No No Spoofing CVE-2026-69775 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-70568 Windows Defender Firewall Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-68831 Windows Defender Firewall Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69607 Windows Deployment Services Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-72943 Windows Deployment Services Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69314 Windows Device Association Broker Service Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69693 Windows Device Association Broker Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69296 Windows Device Association Service Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69478 Windows Device Association Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69488 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69574 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69581 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69711 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69714 Windows Device Association Service Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69791 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69866 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-77500 Windows Device Association Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83940 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69443 Windows Device Health Attestation (DHA) Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-69472 Windows Devices Human Interface Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69715 Windows Direct Show Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-70567 Windows Display Enhancement Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-78446 Windows Distributed File System (DFS) Denial of Service Vulnerability Important 5.3 No No DoS CVE-2026-69424 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69430 Windows Embedded Mode Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69688 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69841 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69794 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69481 Windows Enterprise App Management Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69907 Windows Enterprise App Management Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69362 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69433 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69436 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69450 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69462 Windows Error Reporting Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69513 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69612 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69896 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83996 Windows Error Reporting Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-69684 Windows Error Reporting Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69482 Windows Error Reporting Tampering Vulnerability Important 7.1 No No Tampering CVE-2026-69493 Windows Event Logging Service Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69494 Windows Event Logging Service Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69495 Windows Event Logging Service Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-71338 Windows Failover Cluster Elevation of Privilege Vulnerability Important 6.4 No No EoP CVE-2026-72989 Windows Failover Cluster Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-68878 Windows Fast FAT Driver Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69347 Windows Fast FAT Driver Remote Code Execution Vulnerability Important 7.4 No No RCE CVE-2026-68837 Windows File History Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-71340 Windows File History Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-72947 Windows File History Service Elevation of Privilege Vulnerability Important 6.4 No No EoP CVE-2026-77491 Windows GDI Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-68827 Windows GDI+ Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69288 Windows GDI+ Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69717 Windows Group Policy Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69623 Windows HTTP Print Provider Remote Code Execution Vulnerability Important 8 No No RCE CVE-2026-69597 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69682 Windows Host Guardian Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69553 Windows Hyper-V Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69910 Windows Hyper-V Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69694 Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69341 Windows Image Acquisition Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69500 Windows Image Acquisition Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69613 Windows Image Acquisition Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69483 Windows Image Acquisition Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-69318 Windows Imaging Component Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83992 Windows Imaging Component Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-62694 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69441 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-71339 Windows Installer Elevation of Privilege Vulnerability Important 6.7 No No EoP CVE-2026-72929 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-77894 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-72926 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-72964 Windows Internet Connection Sharing (ICS) Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-69587 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69881 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69429 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69744 Windows Kerberos Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69760 Windows Kerberos Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69685 Windows Kerberos Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69822 Windows Kerberos Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68846 Windows Kernel Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-68884 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69366 Windows Kernel Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69466 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69473 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69578 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83942 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-85360 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69406 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69723 Windows Kernel Information Disclosure Vulnerability Important 5.7 No No Info CVE-2026-69669 Windows Kernel Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69421 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-84001 Windows Key Distribution Center Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69428 Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69281 Windows License Manager Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69315 Windows License Manager Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69440 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No EoP CVE-2026-69508 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7.8 No No EoP CVE-2026-69720 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7.8 No No EoP CVE-2026-78464 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No EoP CVE-2026-68842 Windows MIDI Service Module Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69339 Windows MIDI Service Module Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69451 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-70582 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 6.4 No No EoP CVE-2026-77905 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69349 Windows Management Instrumentation Information Disclosure Vulnerability Important 5.7 No No Info CVE-2026-73012 Windows Management Services Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-69891 Windows Media Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69645 Windows Message Queuing Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-68887 Windows Message Queuing Queue Manager Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-72932 Windows Message Queuing Queue Manager Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-83997 Windows Message Queuing Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-70579 Windows Mobile Broadband Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-69377 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69460 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-70577 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-73003 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-73022 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69674 Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability Important 5.5 No No SFB CVE-2026-72963 Windows Modern Execution Server Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69357 Windows NDIS Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69396 Windows NDIS Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-71334 Windows NFS Portmapper Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68832 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68834 Windows NTFS Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-68838 Windows NTFS Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-68841 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69265 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69312 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69332 Windows NTFS Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69340 Windows NTFS Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69379 Windows NTFS Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69505 Windows NTFS Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69532 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69567 Windows NTFS Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69875 Windows NTFS Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-72935 Windows NTFS Elevation of Privilege Vulnerability Important 6.7 No No EoP CVE-2026-77503 Windows NTFS Elevation of Privilege Vulnerability Important 8.4 No No EoP CVE-2026-83995 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68851 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69504 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69591 Windows NTFS Information Disclosure Vulnerability Important 5.7 No No Info CVE-2026-68833 Windows NTFS Remote Code Execution Vulnerability Important 6.8 No No RCE CVE-2026-68875 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-69461 Windows NTFS Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69463 Windows NTFS Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69479 Windows NTFS Remote Code Execution Vulnerability Important 8.4 No No RCE CVE-2026-69566 Windows NTFS Remote Code Execution Vulnerability Important 6.8 No No RCE CVE-2026-69638 Windows NTFS Remote Code Execution Vulnerability Important 8.4 No No RCE CVE-2026-69709 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-71329 Windows NTFS Remote Code Execution Vulnerability Important 6.8 No No RCE CVE-2026-69425 Windows NTFS Tampering Vulnerability Important 4.7 No No Tampering CVE-2026-62759 Windows Netlogon Spoofing Vulnerability Important 7.5 No No Spoofing CVE-2026-72967 Windows Network Connection Broker Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68886 Windows Network Connection Broker Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69372 Windows Network File System Denial of Service Vulnerability Important 5.7 No No DoS CVE-2026-69772 Windows Network File System Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69648 Windows Notification Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-78441 Windows OLE DB Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-78442 Windows OLE DB Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69564 Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69350 Windows Overlay Filter Elevation of Privilege Vulnerability Important 6.7 No No EoP CVE-2026-69368 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69371 Windows Overlay Filter Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69373 Windows Overlay Filter Elevation of Privilege Vulnerability Important 6.7 No No EoP CVE-2026-69316 Windows Overlay Filter Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-69343 Windows Overlay Filter Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69474 Windows Overlay Filter Information Disclosure Vulnerability Important 4.8 No No Info CVE-2026-69480 Windows Partition Management Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69492 Windows Partition Management Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-71341 Windows Partition Management Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69324 Windows Performance Monitor Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69459 Windows Power Dependency Coordinator Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69321 Windows Power Dependency Coordinator Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-69569 Windows Print Spooler Components Denial of Service Vulnerability Important 5.7 No No DoS CVE-2026-68835 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-68848 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69309 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69346 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69364 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69838 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69921 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70564 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69344 Windows Print Spooler Components Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69552 Windows Print Spooler Components Information Disclosure Vulnerability Important 5.7 No No Info CVE-2026-85877 Windows Print Spooler Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69602 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-68845 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68876 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69534 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69563 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-68873 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-68874 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability Important 5.7 No No Info CVE-2026-62697 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69280 Windows Push Notifications Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69300 Windows Push Notifications Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69548 Windows RNDIS Information Disclosure Vulnerability Important 4.6 No No Info CVE-2026-69768 Windows RNDIS Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69337 Windows Registry Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69331 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69455 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-71333 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-71342 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-71343 Windows Remote Access Connection Manager Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-71352 Windows Remote Access Connection Manager Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-72966 Windows Remote Access Connection Manager Tampering Vulnerability Important 5.5 No No Tampering CVE-2026-77896 Windows Remote Desktop Client Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-69317 Windows Remote Desktop Client Information Disclosure Vulnerability Important 5.7 No No Info CVE-2026-69627 Windows Remote Desktop Licensing Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-70587 Windows Remote Desktop Protocol Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-69287 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69475 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-80096 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 8.8 No No EoP CVE-2026-69616 Windows Remote Desktop Services Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-83999 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69617 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-83952 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-72939 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-71351 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-71353 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70570 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Important 7.5 No No RCE CVE-2026-69544 Windows SMB Client Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69572 Windows SMB Client Information Disclosure Vulnerability Important 5.7 No No Info CVE-2026-69618 Windows SMB Client Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-72936 Windows SMB Client Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69374 Windows SMB Server Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-69403 Windows SMB Server Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-72949 Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-70575 Windows Schannel Denial of Service Vulnerability Important 5.3 No No DoS CVE-2026-72940 Windows Schannel Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69713 Windows Secure Boot Security Feature Bypass Vulnerability Important 4.4 No No SFB CVE-2026-72931 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability Important 4.7 No No DoS CVE-2026-71332 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-72930 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Important 7 No No RCE CVE-2026-77899 Windows Security Center Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-78457 Windows Security Health Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-56177 Windows Server Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-83989 Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-73024 Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-71330 Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Important 7.5 No No Info CVE-2026-69289 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69383 Windows Shell Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69392 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69528 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69606 Windows Shell Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70563 Windows Shell Spoofing Vulnerability Important 8.1 No No Spoofing CVE-2026-69785 Windows Smart Card Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69512 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69535 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69643 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69691 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70569 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69390 Windows Spaceport.sys Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69393 Windows Spaceport.sys Information Disclosure Vulnerability Important 5.7 No No Info CVE-2026-69741 Windows Spaceport.sys Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69770 Windows Spaceport.sys Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69895 Windows Spaceport.sys Information Disclosure Vulnerability Important 4.7 No No Info CVE-2026-72942 Windows Spaceport.sys Information Disclosure Vulnerability Important 6.5 No No Info CVE-2026-69538 Windows Spaceport.sys Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-71345 Windows Spaceport.sys Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-71348 Windows Spaceport.sys Remote Code Execution Vulnerability Important 6.8 No No RCE CVE-2026-71349 Windows Spaceport.sys Remote Code Execution Vulnerability Important 6.8 No No RCE CVE-2026-71350 Windows Spaceport.sys Remote Code Execution Vulnerability Important 6.8 No No RCE CVE-2026-72952 Windows Spaceport.sys Remote Code Execution Vulnerability Important 7 No No RCE CVE-2026-69328 Windows Storage Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-78516 Windows Storage Information Disclosure Vulnerability Important 4.3 No No Info CVE-2026-69389 Windows Storage Management Provider Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-71337 Windows Storage Management Provider Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69381 Windows Storage Port Driver Information Disclosure Vulnerability Important 4.6 No No Info CVE-2026-72937 Windows Storage Port Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-77492 Windows Storage Port Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69290 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69575 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-68844 Windows Storage Spaces Controller Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-68877 Windows Storage Spaces Controller Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-69588 Windows TCP/IP Denial of Service Vulnerability Important 7.5 No No DoS CVE-2026-69385 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69404 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69757 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69761 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69793 Windows TCP/IP Security Feature Bypass Vulnerability Important 7.5 No No SFB CVE-2026-72945 Windows Task Scheduler Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69353 Windows Text Shaping Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69786 Windows Text Shaping Remote Code Execution Vulnerability Important 8.1 No No RCE CVE-2026-69434 Windows URL Moniker Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-73019 Windows URL Moniker Security Feature Bypass Vulnerability Important 4.3 No No SFB CVE-2026-69286 Windows USB Audio Class Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69270 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69307 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69413 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69469 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 6.6 No No EoP CVE-2026-69571 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69687 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69707 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69859 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-68840 Windows USB Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69295 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69503 Windows USB Driver Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-72953 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69457 Windows USB Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-72999 Windows USB Hub Driver Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-69490 Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability Important 6.8 No No EoP CVE-2026-69527 Windows USB Mass Storage Class Driver Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-68839 Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability Important 9.8 No No RCE CVE-2026-69319 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69422 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69423 Windows USB Video Driver Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69584 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69573 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69592 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69758 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-68830 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69351 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-56172 Windows VHD miniport driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69426 Windows VOLSNAP.SYS Remote Code Execution Vulnerability Important 7.8 No No RCE CVE-2026-69468 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69582 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-77904 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69291 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69334 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69708 Windows Web Platform Storage Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-72965 Windows WebClient Service Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69792 Windows Win32K Security Feature Bypass Vulnerability Important 4.7 No No SFB CVE-2026-68880 Windows Win32k Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69274 Windows Win32k Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69301 Windows Win32k Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69333 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69335 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69348 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69410 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69498 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69610 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69630 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69652 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69689 Windows Win32k Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69706 Windows Win32k Elevation of Privilege Vulnerability Important 7.1 No No EoP CVE-2026-69762 Windows Win32k Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-69779 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69818 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69844 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-70283 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-70289 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69517 Windows Wireless Networking Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-69862 Windows Wireless Wide Area Network Service Information Disclosure Vulnerability Important 5.5 No No Info CVE-2026-69560 Windows Work Folder Service Elevation of Privilege Vulnerability Important 7 No No EoP CVE-2026-71336 Windows Work Folder Service Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-80075 Windows Work Folders Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-69619 Windows exFAT File System Elevation of Privilege Vulnerability Important 8 No No EoP CVE-2026-68898 Windows iSCSI Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-69598 Windows iSCSI Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-69628 Windows iSCSI Remote Code Execution Vulnerability Important 8.8 No No RCE CVE-2026-73025 Windows iSCSI Security Feature Bypass Vulnerability Important 9.8 No No SFB CVE-2026-69839 Windows iSCSI Target Service Denial of Service Vulnerability Important 6.5 No No DoS CVE-2026-72927 Winsock Elevation of Privilege Vulnerability Important 6.7 No No EoP CVE-2026-58611 Xbox Gaming Services Elevation of Privilege Vulnerability Important 7.8 No No EoP CVE-2026-78455 Xbox Information Disclosure Vulnerability Important 4.3 No No Info CVE-2026-84353 * Chromium: CVE-2026-84353 Use after free in Shared Tab Groups Critical N/A No No RCE CVE-2026-84324 * Chromium: CVE-2026-84324 Use after free in Proxy High N/A No No RCE CVE-2026-84325 * Chromium: CVE-2026-84325 Improper input validation in DataTransfer High N/A No No RCE CVE-2026-84326 * Chromium: CVE-2026-84326 Uninitialized resource in V8 High N/A No No RCE CVE-2026-84359 * Chromium: CVE-2026-84359 Information leak in Skia High N/A No No Info CVE-2026-84357 * Chromium: CVE-2026-84357 Improper input validation in Omnibox High N/A No No RCE CVE-2026-84349 * Chromium: CVE-2026-84349 Use after free in Browser High N/A No No RCE CVE-2026-84351 * Chromium: CVE-2026-84351 Buffer overflow in GPU High N/A No No RCE CVE-2026-84354 * Chromium: CVE-2026-84354 Incorrect authorization in FileSystem High N/A No No RCE CVE-2026-84323 * Chromium: CVE-2026-84323 Missing authorization in FileSystem Medium N/A No No RCE CVE-2026-84328 * Chromium: CVE-2026-84328 Missing authorization in FileSystem Medium N/A No No RCE CVE-2026-84332 * Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings Medium N/A No No RCE CVE-2026-84334 * Chromium: CVE-2026-84334 Incorrect authorization in Chromoting Medium N/A No No EoP CVE-2026-84335 * Chromium: CVE-2026-84335 Incorrect authorization in TabStrip Medium N/A No No EoP CVE-2026-84347 * Chromium: CVE-2026-84347 Use after free in WebRTC Medium N/A No No RCE CVE-2026-84348 * Chromium: CVE-2026-84348 Information leak in MediaCapture Medium N/A No No Info CVE-2026-84355 * Chromium: CVE-2026-84355 Incorrect authorization in Navigation Medium N/A No No EoP CVE-2026-84358 * Chromium: CVE-2026-84358 Improper privilege management in Downloads Medium N/A No No EoP CVE-2026-84327 * Chromium: CVE-2026-84327 Incorrect authorization in Autofill Low N/A No No Spoofing CVE-2026-84329 * Chromium: CVE-2026-84329 Confused deputy in CredentialProvider Low N/A No No EoP CVE-2026-84331 * Chromium: CVE-2026-84331 Incorrect authorization in Actor Low N/A No No SFB CVE-2026-84350 * Chromium: CVE-2026-84350 Use after free in TabStrip Low N/A No No RCE CVE-2026-84356 * Chromium: CVE-2026-84356 UI misrepresentation in FullScreen Low N/A No No Spoofing * Indicates this CVE had been released by a third party and is now being included in Microsoft releases. ** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user. † Indicates further administrative actions are required to fully address the vulnerability.   As with last month, I’ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment. There are roughly 90+ Critical rated bug remaining, and I’ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They’ve already been patched by Microsoft, so there’s no action for you. But don’t ignore the EoP in Spring Cloud Azure. It’s a complex scenario, but Microsoft still lists it as exploitation more likely. There’s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). From here on out, I’ll try to break things down by component rather than severity rating or impact. It may make it easier. We’ll see. ¯\_(ツ)_/¯ Windows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn’t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function. Windows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads “elevate privileges over a network” rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug. Windows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors. Exchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat. Microsoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook’s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. SharePoint Server: This month’s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above “Exploitation Less Likely”, but given SharePoint's recent history of “Less Likely” becoming “in the KEV catalog,” the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8. Microsoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here’s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378’s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement. Windows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server’s record handling: another single-component sweep, but this one lands on domain controllers. We’ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two “More Likely” unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure. Windows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague “in-network attacker calling arbitrary endpoints” phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where “requires physical access” describes every USB port in the building. The USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic “in-network attacker calling arbitrary endpoints” boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real. Kerberos and the KDC: Six different bugs affect these components, but it’s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC — two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. “The server” here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. Exploitation More Likely: If you prioritize by Microsoft’s Exploit Index (XI), which I don’t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you. The Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824). No new advisories are being released this month. Looking Ahead The next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I’ll be back then to give you my full thoughts on the release – no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!