❌

Visualização normal

Hoje — 9 de Setembro de 2026Stream principal
  • ✇Zero Day Initiative - Blog
  • The September 2026 Security Update Review Dustin Childs
    Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there’s a phrase from my military days that comes to mind: embrace the suck. Take an extended break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here:
     
  • ↗️

The September 2026 Security Update Review

✇Zero Day Initiative - Blog
Por:Dustin Childs
8 de Setembro de 2026, 15:32

Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there’s a phrase from my military days that comes to mind: embrace the suck. Take an extended break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here:

Adobe Patches for September 2026

For the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.

Here’s this month’s overview table:

Adobe Patches for September 2026

Adobe Patches for September 2026

Bulletin ID Product CVE Count Highest Severity Highest CVSS Exploited Deployment Priority
APSB26-146 Adobe Commerce 1 Critical 10.0 Yes 1
APSB26-142 Adobe Campaign Classic 1 Critical 10.0 No 1
APSB26-119 Adobe ColdFusion 9 Critical 9.9 No 1
APSB26-98 Adobe Experience Manager 107 Critical 9.9 No 2
APSB26-138 Adobe Commerce 8 Critical 9.3 No 2
APSB26-141 Adobe Acrobat and Reader 32 Critical 8.8 No 2
APSB26-130 Adobe Photoshop 8 Critical 8.6 No 3
APSB26-131 Adobe Illustrator 3 Critical 8.6 No 3
APSB26-132 Adobe Animate 1 Critical 8.2 No 3
APSB26-136 Adobe Photoshop Mobile 2 Important 7.4 No 3
TOTAL 10 bulletins 172

APSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.

Clearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.

Besides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.

Microsoft Patches for September 2026

It’s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that’s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.

To provide a little historical context on how many CVEs have been patched by Microsoft this year, let’s take a look at some year-over-year totals:

On the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits – yet.  

As always, we’ll start with the bugs under active attack and move on from there.  

-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege Vulnerability
This is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.

-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
This is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don’t know how widespread these exploits may be, so assume they are coming for you and patch quickly.

-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution Vulnerability
There are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail – no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.

 -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege Vulnerability
This is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.

-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution Vulnerability
I count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn’t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker’s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.

-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege Vulnerability
Speaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there’s the user interaction component, but if they succeed, the attacker could gain access to the database at the user’s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.

-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution Vulnerability
This CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an “in-network attacker”, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.

So where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):

  • CVE-2026-69510 – Windows DHCP Server Remote Code Execution Vulnerability

  • CVE-2026-69524 – Windows Active Directory Domain Services Remote Code Execution Vulnerability

  • CVE-2026-69530 – Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

  • CVE-2026-69579 – Windows Message Queuing Remote Code Execution Vulnerability

  • CVE-2026-69590 – Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  • CVE-2026-69595 – Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

  • CVE-2026-69730 – Windows DNS Server Remote Code Execution Vulnerability (SigRed’s spiritual successor)

  • CVE-2026-69858 – Windows DNS Server Remote Code Execution Vulnerability

  • CVE-2026-72936 – Windows SMB Client Remote Code Execution Vulnerability

  • CVE-2026-72979 – Windows DHCP Server Remote Code Execution Vulnerability

  • CVE-2026-72981 – IP Helper Remote Code Execution Vulnerability

  • CVE-2026-72982 – Windows Netlogon Remote Code Execution Vulnerability

  • CVE-2026-72983 – Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

  • CVE-2026-72987 – Windows DNS Remote Code Execution Vulnerability

  • CVE-2026-73009 – Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  • CVE-2026-73010 – Microsoft Failover Cluster Remote Code Execution Vulnerability

  • CVE-2026-78444 – Microsoft Failover Cluster Remote Code Execution Vulnerability

  • CVE-2026-78449 – Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

  • CVE-2026-78450 – Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

  • CVE-2026-83997 – Windows Message Queuing Remote Code Execution Vulnerability

Here’s the full list of CVEs released by Microsoft for September 2026:

CVE Title Severity CVSS Public Exploited Type
CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Important 7.8 No Yes EoP
CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability Important 7.8 No Yes EoP
CVE-2026-70352 ** Azure AI Language Elevation of Privilege Vulnerability Critical 10 No No EoP
CVE-2026-69857 ** Azure Cosmos DB Spoofing Vulnerability Critical 8.5 No No Spoofing
CVE-2026-80098 ** Copilot Studio Elevation of Privilege Vulnerability Critical 9.3 No No EoP
CVE-2026-73006 DirectWrite Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-83941 ** Entra ID Elevation of Privilege Vulnerability Critical 9.9 No No EoP
CVE-2026-72986 Graphic Fonts Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-73018 Graphic Fonts Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-73017 Graphics Kernel Remote Code Execution Vulnerability Critical 7.5 No No RCE
CVE-2026-58599 HEVC Video Extensions Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-72981 IP Helper Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-72983 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-83711 ** Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability Critical 10 No No EoP
CVE-2026-62906 ** Microsoft Discovery Studio Information Disclosure Vulnerability Critical 7.4 No No Info
CVE-2026-65772 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-62916 ** Microsoft Entra ID Elevation of Privilege Vulnerability Critical 9.1 No No EoP
CVE-2026-81948 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-81949 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-81950 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-81951 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-81953 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-81959 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-70178 ** Microsoft Fabric Elevation of Privilege Vulnerability Critical 8.5 No No EoP
CVE-2026-73010 Microsoft Failover Cluster Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-78444 Microsoft Failover Cluster Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-78439 Microsoft Office Graphics Component Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-78520 Microsoft Office Outlook Information Disclosure Vulnerability Critical 6.5 No No Info
CVE-2026-78509 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-78519 Microsoft Office Outlook Remote Code Execution Vulnerability Critical No No RCE
CVE-2026-78525 Microsoft Office Outlook Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69678 Microsoft Office PowerPoint Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69767 Microsoft Office PowerPoint Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69797 Microsoft Office PowerPoint Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69285 Microsoft Office Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69632 Microsoft Office Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-77898 Microsoft Office Remote Code Execution Vulnerability Critical 7.5 No No RCE
CVE-2026-78505 Microsoft Office Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-77504 Microsoft Office Word Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-65669 Microsoft SQL Server Elevation of Privilege Vulnerability Critical 9.6 No No EoP
CVE-2026-67378 Microsoft SQL Server Remote Code Execution Vulnerability Critical 8.5 No No RCE
CVE-2026-67631 Microsoft SQL Server Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-67636 Microsoft SQL Server Remote Code Execution Vulnerability Critical 8.5 No No RCE
CVE-2026-67643 Microsoft SQL Server Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-70351 Microsoft WebP Image Extension Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69601 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-78510 Microsoft Word Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-81952 Microsoft Word Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-65818 ** Power Automate Elevation of Privilege Vulnerability Critical 8.5 No No EoP
CVE-2026-69649 Raw Image Extension Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-66302 Skype for Business Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-69854 Spring Cloud Azure Elevation of Privilege Vulnerability Critical 9 No No EoP
CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability Critical 7.5 No No RCE
CVE-2026-81352 Web Media Extensions Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69874 Windows ALPC Elevation of Privilege Vulnerability Critical 8.2 No No EoP
CVE-2026-72958 Windows Credential Guard Elevation of Privilege Vulnerability Critical 8.2 No No EoP
CVE-2026-69845 Windows DHCP Server Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-72979 Windows DHCP Server Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-72987 Windows DNS Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-69730 Windows DNS Server Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-69813 Windows DNS Server Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-69827 Windows DNS Server Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-69858 Windows DNS Server Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-77505 Windows DNS Server Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-72954 Windows Deployment Services Remote Code Execution Vulnerability Critical 7.5 No No RCE
CVE-2026-72957 Windows Deployment Services Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-77493 Windows Graphics Component Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-81955 Windows Graphics Component Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69769 Windows HTTP Print Provider Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-69710 Windows Hello Elevation of Privilege Vulnerability Critical 7.5 No No EoP
CVE-2026-69725 Windows Hello Elevation of Privilege Vulnerability Critical 7.8 No No EoP
CVE-2026-69740 Windows Hello Elevation of Privilege Vulnerability Critical 8.8 No No EoP
CVE-2026-69784 Windows Hello Elevation of Privilege Vulnerability Critical 8.8 No No EoP
CVE-2026-69799 Windows Hello Elevation of Privilege Vulnerability Critical 7.8 No No EoP
CVE-2026-69820 Windows Hello Elevation of Privilege Vulnerability Critical 8.2 No No EoP
CVE-2026-69864 Windows Hello Elevation of Privilege Vulnerability Critical 7.8 No No EoP
CVE-2026-81354 Windows Hello Elevation of Privilege Vulnerability Critical 8.2 No No EoP
CVE-2026-72980 Windows Hello Security Feature Bypass Vulnerability Critical 4.4 No No SFB
CVE-2026-72961 Windows Hyper-V Elevation of Privilege Vulnerability Critical 8.2 No No EoP
CVE-2026-69603 Windows Hyper-V Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-80083 Windows Hyper-V Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69499 Windows Imaging Component Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-70296 Windows Imaging Component Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-73013 Windows Imaging Component Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-73023 Windows Imaging Component Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-77495 Windows Imaging Component Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69676 Windows Kerberos Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-70203 Windows Media Player Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-72960 Windows Media Player Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69579 Windows Message Queuing Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-72982 Windows Netlogon Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-70586 Windows Paint Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69530 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-78449 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-78450 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-69518 Windows Remote Desktop Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-69852 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Critical 7.5 No No RCE
CVE-2026-72950 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-72959 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-69501 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Critical 7 No No EoP
CVE-2026-69846 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Critical 8.2 No No EoP
CVE-2026-69906 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Critical 8.2 No No EoP
CVE-2026-83939 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Critical 8.2 No No EoP
CVE-2026-73009 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-69595 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-70585 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Critical 7 No No RCE
CVE-2026-78445 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-69829 Windows Shell Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-72962 Windows USB Video Driver Elevation of Privilege Vulnerability Critical 8.2 No No EoP
CVE-2026-69890 Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability Critical 7.5 No No EoP
CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Critical 7.8 No No EoP
CVE-2026-83501 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability Critical 5.5 No No Info
CVE-2026-69805 .NET Elevation of Privilege Vulnerability Important 7.5 No No EoP
CVE-2026-69806 .NET Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-58649 .NET Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-71328 .NET and Visual Studio Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-57099 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69304 ASP.NET Core Denial of Service Vulnerability Important 5.9 No No DoS
CVE-2026-62810 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69821 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69395 Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69624 Active Directory Certificate Services (AD CS) Tampering Vulnerability Important 6.5 No No Tampering
CVE-2026-69359 Active Directory Domain Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72978 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Important 5.9 No No DoS
CVE-2026-69401 Audio Video Control Transport Protocol Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62895 Azure Arc SQL Server Extension Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-77909 Azure CycleCloud Information Disclosure Vulnerability Important 7.7 No No Info
CVE-2026-81349 Azure HDInsight Ambari Elevation of Privilege Vulnerability Important 7.2 No No EoP
CVE-2026-69329 BranchCache Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69516 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-68847 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69470 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69625 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-73014 Data Sharing Service Client Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-73016 DirectWrite Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-81380 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability Important 5.3 No No Info
CVE-2026-81381 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69576 Graphic Fonts Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-81353 HEIF Image Extensions Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-58600 HEVC Video Extensions Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69731 HID Class Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68895 Internet Storage Name Service Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69275 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69900 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68850 Microsoft Account Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68852 Microsoft Account Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-84003 Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability Important 7.4 No No Spoofing
CVE-2026-80097 Microsoft Authenticator Elevation of Privilege Vulnerability Important 8.6 No No EoP
CVE-2026-83948 Microsoft Azure CLI Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-69299 Microsoft COM for Windows Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69294 Microsoft COM for Windows Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69491 Microsoft DirectMusic Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-77908 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-81387 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-81390 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-81391 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-81392 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-81393 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-81394 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-81395 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-81399 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-81400 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-81401 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-81958 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-81386 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-81388 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-81389 Microsoft Excel Remote Code Execution Vulnerability Important 7 No No RCE
CVE-2026-81396 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-81397 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-81398 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-81947 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-81954 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-81956 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-81957 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-81960 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-69378 Microsoft Exchange Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69380 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 8.1 No No EoP
CVE-2026-69641 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 9.1 No No EoP
CVE-2026-69382 Microsoft Exchange Server Information Disclosure Vulnerability Important 5.9 No No Info
CVE-2026-55007 Microsoft Exchange Server Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-69355 Microsoft Exchange Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69356 Microsoft Exchange Server Spoofing Vulnerability Important 9.3 No No Spoofing
CVE-2026-69361 Microsoft Exchange Server Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-69375 Microsoft Exchange Server Tampering Vulnerability Important 6.5 No No Tampering
CVE-2026-69467 Microsoft Graphics Component Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83990 Microsoft Graphics Component Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-84000 Microsoft Graphics Component Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-69605 Microsoft Install Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69325 Microsoft JScript Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-69438 Microsoft JScript Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-69277 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69365 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69594 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69477 Microsoft Office Access Remote Code Execution Vulnerability Important 7.3 No No RCE
CVE-2026-69529 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69614 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69778 Microsoft Office Access Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-72974 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-78515 Microsoft Office Excel Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-85875 Microsoft Office Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-78518 Microsoft Office Excel Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69626 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69739 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-80076 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-80078 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-80082 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-80087 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-80089 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-80091 Microsoft Office Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-80073 Microsoft Office Outlook Information Disclosure Vulnerability Important No No Info
CVE-2026-80084 Microsoft Office Outlook Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69629 Microsoft Office Outlook Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-72938 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-72956 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-72975 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-72977 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-78513 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-80086 Microsoft Office PowerPoint Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-80081 Microsoft Office PowerPoint Remote Code Execution Vulnerability Important No No RCE
CVE-2026-69742 Microsoft Office Publisher Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-81385 Microsoft Office Publisher Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69442 Microsoft Office Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69464 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-69716 Microsoft Office SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-69409 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69636 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69683 Microsoft Office SharePoint Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69904 Microsoft Office SharePoint Information Disclosure Vulnerability Important 3.5 No No Info
CVE-2026-69268 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69273 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69282 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69465 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69724 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69804 Microsoft Office SharePoint Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-69402 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No Spoofing
CVE-2026-69417 Microsoft Office SharePoint Spoofing Vulnerability Important 7.3 No No Spoofing
CVE-2026-69615 Microsoft Office SharePoint Spoofing Vulnerability Important 3.5 No No Spoofing
CVE-2026-69690 Microsoft Office SharePoint Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-64918 Microsoft Office Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-68843 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69719 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69734 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-72976 Microsoft Office Word Information Disclosure Vulnerability Important 5 No No Info
CVE-2026-77911 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-78502 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-78503 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-78506 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-78522 Microsoft Office Word Information Disclosure Vulnerability Important No No Info
CVE-2026-80079 Microsoft Office Word Information Disclosure Vulnerability Important No No Info
CVE-2026-80088 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-80090 Microsoft Office Word Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-83949 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-83951 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69360 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69556 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69671 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69686 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69722 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69759 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69764 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-72972 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-72973 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-77901 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-78504 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-78507 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-78511 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-78512 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-78514 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-78521 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-78526 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-80080 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-80085 Microsoft Office Word Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69397 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-77897 Microsoft Power Automate Desktop Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62801 Microsoft PowerShell Security Feature Bypass Vulnerability Important 6.5 No No SFB
CVE-2026-57098 Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-67376 Microsoft SQL Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-67633 Microsoft SQL Server Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-67641 Microsoft SQL Server Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-66814 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-66818 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-66819 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-67368 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-67370 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-67381 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-67369 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-67383 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-67386 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-67389 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-67390 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-67393 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-67624 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-67629 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-67630 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-67645 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-67648 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-68776 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-68777 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-68778 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-68779 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-68780 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-68781 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-68784 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69562 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-73029 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-77488 Microsoft SQL Server Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-47297 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-67373 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-67379 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.5 No No RCE
CVE-2026-67380 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-67384 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-67385 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-67388 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-67638 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-67639 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-67642 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-68775 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-68785 Microsoft SQL Server Remote Code Execution Vulnerability Important 4.9 No No RCE
CVE-2026-68786 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-68787 Microsoft SQL Server Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-77481 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-77482 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-77484 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-77486 Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-66816 Microsoft SQL Server Security Feature Bypass Vulnerability Important 6.5 No No SFB
CVE-2026-68885 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68888 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68889 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-68890 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68892 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68897 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69269 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69271 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69272 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69313 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69336 Microsoft Standard XPS Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-68881 Microsoft Standard XPS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-68891 Microsoft Standard XPS Information Disclosure Vulnerability Important 4.7 No No Info
CVE-2026-69308 Microsoft Standard XPS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69345 Microsoft Standard XPS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69367 Microsoft Standard XPS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69376 Microsoft Standard XPS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69824 Microsoft Standard XPS Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-72946 Microsoft Storage Port Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-65812 Microsoft Teams for Android Information Disclosure Vulnerability Important 6.8 No No Info
CVE-2026-69559 Microsoft Teams for Android Information Disclosure Vulnerability Important 5.8 No No Info
CVE-2026-56198 Microsoft Trace Data Helper Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69276 Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-69420 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69427 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-72933 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-62706 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-62744 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69386 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69408 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-69511 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69586 Microsoft Windows PDF Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-78451 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability Important 6.8 No No EoP
CVE-2026-78452 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability Important 4.6 No No Info
CVE-2026-78453 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-68896 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69305 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69585 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69600 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69608 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69911 Microsoft Windows Search Component Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69507 Microsoft Windows Search Component Information Disclosure Vulnerability Important 5.7 No No Info
CVE-2026-70145 Microsoft Windows Search Component Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69453 Microsoft Windows Search Component Tampering Vulnerability Important 5.5 No No Tampering
CVE-2026-69554 Microsoft Windows Search Component Tampering Vulnerability Important 5.5 No No Tampering
CVE-2026-69444 Microsoft Windows Speech Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69456 Microsoft Windows Speech Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69531 Microsoft Windows Speech Tampering Vulnerability Important 5.5 No No Tampering
CVE-2026-62804 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-69807 PowerShell Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69303 Push Message Routing Service Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69819 RPC Runtime Library Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-68828 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69358 Remote Desktop Client Remote Code Execution Vulnerability Important 7.1 No No RCE
CVE-2026-69485 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-78463 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-80074 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-80077 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-83998 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69292 Remote Desktop Gateway Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69338 Remote Desktop Gateway Service Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-68893 Remote Desktop Licensing Service Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69514 Remote Desktop Services Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-69525 Remote Desktop Services Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-69536 Remote Desktop Services Remote Code Execution Vulnerability Important 7.1 No No RCE
CVE-2026-69539 Remote Desktop Services Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-69599 Remote Desktop Services Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-69509 Role: Windows Fax Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69621 Role: Windows Fax Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-72944 Role: Windows Fax Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-66820 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-73028 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-77480 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-77483 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-77485 SQL Server Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-77487 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-78456 SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-66304 Skype for Business Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-66306 Skype for Business Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-63523 Skype for Business Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-66305 Skype for Business Spoofing Vulnerability Important 7.1 No No Spoofing
CVE-2026-69642 Skype for Business Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-69646 Skype for Business Spoofing Vulnerability Important 8.3 No No Spoofing
CVE-2026-66303 Skype for Business and Lync Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-66307 Skype for Business and Lync Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-66308 Skype for Business and Lync Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-69568 Storage Spaces Controller Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69431 Telnet Client Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-69384 Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability Important 7.1 No No DoS
CVE-2026-69541 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 7.8 No No EoP
CVE-2026-69549 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 7 No No EoP
CVE-2026-69611 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 7 No No EoP
CVE-2026-69681 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 8 No No EoP
CVE-2026-70574 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 7.8 No No EoP
CVE-2026-81383 Visual Studio Code Information Disclosure Vulnerability Important 7.4 No No Info
CVE-2026-70334 Visual Studio Code Security Feature Bypass Vulnerability Important 7.8 No No SFB
CVE-2026-78461 Visual Studio Code Security Feature Bypass Vulnerability Important 7.4 No No SFB
CVE-2026-78462 Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No SFB
CVE-2026-81356 Visual Studio Code Security Feature Bypass Vulnerability Important 8.2 No No SFB
CVE-2026-81357 Visual Studio Code Security Feature Bypass Vulnerability Important 8.2 No No SFB
CVE-2026-81376 Visual Studio Code Security Feature Bypass Vulnerability Important 9.6 No No SFB
CVE-2026-81378 Visual Studio Code Security Feature Bypass Vulnerability Important 8.2 No No SFB
CVE-2026-81379 Visual Studio Code Security Feature Bypass Vulnerability Important 8.2 No No SFB
CVE-2026-81377 Visual Studio Code Tampering Vulnerability Important 6.5 No No Tampering
CVE-2026-77906 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-77907 Visual Studio Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69407 Volume Manager Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69418 Volume Manager Driver Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69432 Volume Manager Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72985 Volume Shadow Copy Elevation of Privilege Vulnerability Important 6.8 No No EoP
CVE-2026-69609 Win32k Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69808 Win32k Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69832 Win32k Information Disclosure Vulnerability Important 5.6 No No Info
CVE-2026-69853 Win32k Information Disclosure Vulnerability Important 4.7 No No Info
CVE-2026-70290 Win32k Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70565 Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69834 Windows ALPC Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69654 Windows Accounts Control Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69816 Windows Accounts Control Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62762 Windows Active Directory Domain Services Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-69809 Windows Active Directory Domain Services Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-62813 Windows Active Directory Domain Services Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-69524 Windows Active Directory Domain Services Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-69546 Windows Active Directory Domain Services Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-50349 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-70342 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 8.1 No No EoP
CVE-2026-69311 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69394 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69447 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69540 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69604 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69692 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69801 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70562 Windows Audio Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-73005 Windows Authentication Methods Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-73004 Windows Autopilot Tampering Vulnerability Important 5.5 No No Tampering
CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69293 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69298 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69323 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69352 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69476 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69489 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69580 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69583 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69589 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69593 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69727 Windows Biometric Service Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69738 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69773 Windows Biometric Service Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69787 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69826 Windows Biometric Service Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-70572 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70573 Windows Biometric Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-70581 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72941 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72988 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72990 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72991 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72992 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72993 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72994 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72995 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72996 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72997 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-73000 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-73001 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-73002 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-73007 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-73011 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-73015 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-73020 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-73021 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-73026 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-77489 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-78447 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-78448 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83954 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83955 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83967 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83968 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83969 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83970 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83971 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83972 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83973 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83974 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83975 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83976 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83977 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83978 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83979 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83980 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83981 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83982 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83983 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83985 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83986 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83987 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83988 Windows Biometric Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-73008 Windows Biometric Service Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69458 Windows BitLocker Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69449 Windows BitLocker Remote Code Execution Vulnerability Important 6.7 No No RCE
CVE-2026-69817 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-68849 Windows Bluetooth Port Driver Information Disclosure Vulnerability Important 4.7 No No Info
CVE-2026-69388 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69398 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69448 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69889 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-77892 Windows Boot Manager Elevation of Privilege Vulnerability Important 6.8 No No EoP
CVE-2026-69735 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69391 Windows Broker Infrastructure Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69283 Windows CD-ROM Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69561 Windows CD-ROM Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-78454 Windows CD-ROM Driver Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-78508 Windows CD-ROM Driver Information Disclosure Vulnerability Important 4.6 No No Info
CVE-2026-69542 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69279 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-80093 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-83991 Windows Cloud Files Mini Filter Driver Tampering Vulnerability Important 5.5 No No Tampering
CVE-2026-69445 Windows Compressed Folder Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70019 Windows Compressed Folder Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69496 Windows Compressed Folder Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-69267 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69771 Windows Container Manager Service Security Feature Bypass Vulnerability Important 4.7 No No SFB
CVE-2026-70583 Windows Core Messaging Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70584 Windows Core Messaging Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70578 Windows Credential Guard Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69790 Windows Credential Providers Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69814 Windows Credential Providers Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69729 Windows Credential Providers Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69284 Windows DCOM Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69781 Windows DHCP Client Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-69777 Windows DHCP Client Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69342 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69405 Windows DHCP Server Denial of Service Vulnerability Important 5.7 No No DoS
CVE-2026-69416 Windows DHCP Server Denial of Service Vulnerability Important 5.7 No No DoS
CVE-2026-69497 Windows DHCP Server Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-69637 Windows DHCP Server Denial of Service Vulnerability Important 5.7 No No DoS
CVE-2026-69679 Windows DHCP Server Denial of Service Vulnerability Important 5.7 No No DoS
CVE-2026-70065 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-77494 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-77498 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-77499 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-77501 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-77502 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-77886 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-77888 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-77889 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-77890 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-77893 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-77895 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69415 Windows DHCP Server Elevation of Privilege Vulnerability Important 6.8 No No EoP
CVE-2026-69297 Windows DHCP Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69803 Windows DHCP Server Information Disclosure Vulnerability Important 5.9 No No Info
CVE-2026-69929 Windows DHCP Server Information Disclosure Vulnerability Important 5.9 No No Info
CVE-2026-69930 Windows DHCP Server Information Disclosure Vulnerability Important 5.9 No No Info
CVE-2026-70124 Windows DHCP Server Information Disclosure Vulnerability Important 5.9 No No Info
CVE-2026-69266 Windows DHCP Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69412 Windows DHCP Server Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-69510 Windows DHCP Server Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-69547 Windows DHCP Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69620 Windows DHCP Server Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-69847 Windows DHCP Server Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-69876 Windows DHCP Server Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-69878 Windows DHCP Server Remote Code Execution Vulnerability Important 6.4 No No RCE
CVE-2026-77887 Windows DHCP Server Remote Code Execution Vulnerability Important 6.4 No No RCE
CVE-2026-77891 Windows DHCP Server Remote Code Execution Vulnerability Important 6.4 No No RCE
CVE-2026-69631 Windows DNS Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-70091 Windows DNS Denial of Service Vulnerability Important 5.9 No No DoS
CVE-2026-69310 Windows DNS Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-72948 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-69369 Windows DNS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69672 Windows DNS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-78523 Windows DNS Server Denial of Service Vulnerability Important 5.9 No No DoS
CVE-2026-69551 Windows DNS Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69782 Windows DNS Server Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-69989 Windows DNS Server Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-72928 Windows DNS Server Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-69680 Windows DNS Spoofing Vulnerability Important 8.1 No No Spoofing
CVE-2026-69775 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-70568 Windows Defender Firewall Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-68831 Windows Defender Firewall Service Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69607 Windows Deployment Services Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-72943 Windows Deployment Services Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-69314 Windows Device Association Broker Service Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69693 Windows Device Association Broker Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69296 Windows Device Association Service Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69478 Windows Device Association Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69488 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69574 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69581 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69711 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69714 Windows Device Association Service Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69791 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69866 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-77500 Windows Device Association Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83940 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69443 Windows Device Health Attestation (DHA) Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-69472 Windows Devices Human Interface Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69715 Windows Direct Show Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-70567 Windows Display Enhancement Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-78446 Windows Distributed File System (DFS) Denial of Service Vulnerability Important 5.3 No No DoS
CVE-2026-69424 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69430 Windows Embedded Mode Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69688 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69841 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69794 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69481 Windows Enterprise App Management Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69907 Windows Enterprise App Management Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69362 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69433 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69436 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69450 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69462 Windows Error Reporting Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69513 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69612 Windows Error Reporting Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69896 Windows Error Reporting Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-83996 Windows Error Reporting Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-69684 Windows Error Reporting Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69482 Windows Error Reporting Tampering Vulnerability Important 7.1 No No Tampering
CVE-2026-69493 Windows Event Logging Service Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-69494 Windows Event Logging Service Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69495 Windows Event Logging Service Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-71338 Windows Failover Cluster Elevation of Privilege Vulnerability Important 6.4 No No EoP
CVE-2026-72989 Windows Failover Cluster Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-68878 Windows Fast FAT Driver Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69347 Windows Fast FAT Driver Remote Code Execution Vulnerability Important 7.4 No No RCE
CVE-2026-68837 Windows File History Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-71340 Windows File History Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-72947 Windows File History Service Elevation of Privilege Vulnerability Important 6.4 No No EoP
CVE-2026-77491 Windows GDI Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-68827 Windows GDI+ Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69288 Windows GDI+ Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69717 Windows Group Policy Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69623 Windows HTTP Print Provider Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-69597 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69682 Windows Host Guardian Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69553 Windows Hyper-V Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69910 Windows Hyper-V Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-69694 Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69341 Windows Image Acquisition Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69500 Windows Image Acquisition Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69613 Windows Image Acquisition Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69483 Windows Image Acquisition Information Disclosure Vulnerability Important 4.7 No No Info
CVE-2026-69318 Windows Imaging Component Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-83992 Windows Imaging Component Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-62694 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69441 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-71339 Windows Installer Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-72929 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-77894 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-72926 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-72964 Windows Internet Connection Sharing (ICS) Tampering Vulnerability Important 5.5 No No Tampering
CVE-2026-69587 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69881 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69429 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-69744 Windows Kerberos Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69760 Windows Kerberos Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69685 Windows Kerberos Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69822 Windows Kerberos Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68846 Windows Kernel Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-68884 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69366 Windows Kernel Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69466 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69473 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69578 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-83942 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-85360 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69406 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69723 Windows Kernel Information Disclosure Vulnerability Important 5.7 No No Info
CVE-2026-69669 Windows Kernel Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-69421 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-84001 Windows Key Distribution Center Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69428 Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69281 Windows License Manager Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69315 Windows License Manager Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-69440 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No EoP
CVE-2026-69508 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7.8 No No EoP
CVE-2026-69720 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7.8 No No EoP
CVE-2026-78464 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No EoP
CVE-2026-68842 Windows MIDI Service Module Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69339 Windows MIDI Service Module Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69451 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-70582 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 6.4 No No EoP
CVE-2026-77905 Windows Management Instrumentation Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69349 Windows Management Instrumentation Information Disclosure Vulnerability Important 5.7 No No Info
CVE-2026-73012 Windows Management Services Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-69891 Windows Media Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69645 Windows Message Queuing Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-68887 Windows Message Queuing Queue Manager Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-72932 Windows Message Queuing Queue Manager Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-83997 Windows Message Queuing Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-70579 Windows Mobile Broadband Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-69377 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69460 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-70577 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-73003 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-73022 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69674 Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability Important 5.5 No No SFB
CVE-2026-72963 Windows Modern Execution Server Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69357 Windows NDIS Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69396 Windows NDIS Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-71334 Windows NFS Portmapper Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68832 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68834 Windows NTFS Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-68838 Windows NTFS Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-68841 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69265 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69312 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69332 Windows NTFS Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69340 Windows NTFS Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69379 Windows NTFS Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69505 Windows NTFS Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69532 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69567 Windows NTFS Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69875 Windows NTFS Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-72935 Windows NTFS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-77503 Windows NTFS Elevation of Privilege Vulnerability Important 8.4 No No EoP
CVE-2026-83995 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68851 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69504 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69591 Windows NTFS Information Disclosure Vulnerability Important 5.7 No No Info
CVE-2026-68833 Windows NTFS Remote Code Execution Vulnerability Important 6.8 No No RCE
CVE-2026-68875 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-69461 Windows NTFS Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69463 Windows NTFS Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-69479 Windows NTFS Remote Code Execution Vulnerability Important 8.4 No No RCE
CVE-2026-69566 Windows NTFS Remote Code Execution Vulnerability Important 6.8 No No RCE
CVE-2026-69638 Windows NTFS Remote Code Execution Vulnerability Important 8.4 No No RCE
CVE-2026-69709 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-71329 Windows NTFS Remote Code Execution Vulnerability Important 6.8 No No RCE
CVE-2026-69425 Windows NTFS Tampering Vulnerability Important 4.7 No No Tampering
CVE-2026-62759 Windows Netlogon Spoofing Vulnerability Important 7.5 No No Spoofing
CVE-2026-72967 Windows Network Connection Broker Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68886 Windows Network Connection Broker Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69372 Windows Network File System Denial of Service Vulnerability Important 5.7 No No DoS
CVE-2026-69772 Windows Network File System Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69648 Windows Notification Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-78441 Windows OLE DB Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-78442 Windows OLE DB Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69564 Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69350 Windows Overlay Filter Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-69368 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69371 Windows Overlay Filter Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69373 Windows Overlay Filter Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-69316 Windows Overlay Filter Information Disclosure Vulnerability Important 4.7 No No Info
CVE-2026-69343 Windows Overlay Filter Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69474 Windows Overlay Filter Information Disclosure Vulnerability Important 4.8 No No Info
CVE-2026-69480 Windows Partition Management Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69492 Windows Partition Management Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-71341 Windows Partition Management Driver Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69324 Windows Performance Monitor Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69459 Windows Power Dependency Coordinator Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69321 Windows Power Dependency Coordinator Tampering Vulnerability Important 5.5 No No Tampering
CVE-2026-69569 Windows Print Spooler Components Denial of Service Vulnerability Important 5.7 No No DoS
CVE-2026-68835 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-68848 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69309 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69346 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69364 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69838 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69921 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70564 Windows Print Spooler Components Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69344 Windows Print Spooler Components Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69552 Windows Print Spooler Components Information Disclosure Vulnerability Important 5.7 No No Info
CVE-2026-85877 Windows Print Spooler Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69602 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-68845 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68876 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69534 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69563 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-68873 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-68874 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability Important 5.7 No No Info
CVE-2026-62697 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69280 Windows Push Notifications Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69300 Windows Push Notifications Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69548 Windows RNDIS Information Disclosure Vulnerability Important 4.6 No No Info
CVE-2026-69768 Windows RNDIS Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-69337 Windows Registry Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69331 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69455 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-71333 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-71342 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-71343 Windows Remote Access Connection Manager Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-71352 Windows Remote Access Connection Manager Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-72966 Windows Remote Access Connection Manager Tampering Vulnerability Important 5.5 No No Tampering
CVE-2026-77896 Windows Remote Desktop Client Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-69317 Windows Remote Desktop Client Information Disclosure Vulnerability Important 5.7 No No Info
CVE-2026-69627 Windows Remote Desktop Licensing Service Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70587 Windows Remote Desktop Protocol Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-69287 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69475 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-80096 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-69616 Windows Remote Desktop Services Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-83999 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69617 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-83952 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-72939 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-71351 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-71353 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-70570 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-69544 Windows SMB Client Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69572 Windows SMB Client Information Disclosure Vulnerability Important 5.7 No No Info
CVE-2026-69618 Windows SMB Client Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-72936 Windows SMB Client Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-69374 Windows SMB Server Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-69403 Windows SMB Server Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-72949 Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-70575 Windows Schannel Denial of Service Vulnerability Important 5.3 No No DoS
CVE-2026-72940 Windows Schannel Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69713 Windows Secure Boot Security Feature Bypass Vulnerability Important 4.4 No No SFB
CVE-2026-72931 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability Important 4.7 No No DoS
CVE-2026-71332 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-72930 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Important 7 No No RCE
CVE-2026-77899 Windows Security Center Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-78457 Windows Security Health Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-56177 Windows Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-83989 Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-73024 Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-71330 Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-69289 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69383 Windows Shell Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69392 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69528 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69606 Windows Shell Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-70563 Windows Shell Spoofing Vulnerability Important 8.1 No No Spoofing
CVE-2026-69785 Windows Smart Card Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69512 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69535 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69643 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69691 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70569 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69390 Windows Spaceport.sys Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69393 Windows Spaceport.sys Information Disclosure Vulnerability Important 5.7 No No Info
CVE-2026-69741 Windows Spaceport.sys Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69770 Windows Spaceport.sys Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69895 Windows Spaceport.sys Information Disclosure Vulnerability Important 4.7 No No Info
CVE-2026-72942 Windows Spaceport.sys Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-69538 Windows Spaceport.sys Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-71345 Windows Spaceport.sys Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-71348 Windows Spaceport.sys Remote Code Execution Vulnerability Important 6.8 No No RCE
CVE-2026-71349 Windows Spaceport.sys Remote Code Execution Vulnerability Important 6.8 No No RCE
CVE-2026-71350 Windows Spaceport.sys Remote Code Execution Vulnerability Important 6.8 No No RCE
CVE-2026-72952 Windows Spaceport.sys Remote Code Execution Vulnerability Important 7 No No RCE
CVE-2026-69328 Windows Storage Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-78516 Windows Storage Information Disclosure Vulnerability Important 4.3 No No Info
CVE-2026-69389 Windows Storage Management Provider Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-71337 Windows Storage Management Provider Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69381 Windows Storage Port Driver Information Disclosure Vulnerability Important 4.6 No No Info
CVE-2026-72937 Windows Storage Port Driver Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-77492 Windows Storage Port Driver Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69290 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69575 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-68844 Windows Storage Spaces Controller Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68877 Windows Storage Spaces Controller Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-69588 Windows TCP/IP Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-69385 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69404 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69757 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69761 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69793 Windows TCP/IP Security Feature Bypass Vulnerability Important 7.5 No No SFB
CVE-2026-72945 Windows Task Scheduler Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69353 Windows Text Shaping Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69786 Windows Text Shaping Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-69434 Windows URL Moniker Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-73019 Windows URL Moniker Security Feature Bypass Vulnerability Important 4.3 No No SFB
CVE-2026-69286 Windows USB Audio Class Driver Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69270 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69307 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69413 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69469 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 6.6 No No EoP
CVE-2026-69571 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69687 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69707 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69859 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-68840 Windows USB Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69295 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69503 Windows USB Driver Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-72953 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69457 Windows USB Driver Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-72999 Windows USB Hub Driver Elevation of Privilege Vulnerability Important 6.8 No No EoP
CVE-2026-69490 Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability Important 6.8 No No EoP
CVE-2026-69527 Windows USB Mass Storage Class Driver Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-68839 Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-69319 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69422 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69423 Windows USB Video Driver Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69584 Windows USB Video Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69573 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69592 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69758 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68830 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69351 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-56172 Windows VHD miniport driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69426 Windows VOLSNAP.SYS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-69468 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69582 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-77904 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69291 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69334 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69708 Windows Web Platform Storage Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-72965 Windows WebClient Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69792 Windows Win32K Security Feature Bypass Vulnerability Important 4.7 No No SFB
CVE-2026-68880 Windows Win32k Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69274 Windows Win32k Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69301 Windows Win32k Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69333 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69335 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69348 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69410 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69498 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69610 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69630 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69652 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69689 Windows Win32k Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69706 Windows Win32k Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-69762 Windows Win32k Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-69779 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69818 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69844 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70283 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-70289 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69517 Windows Wireless Networking Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-69862 Windows Wireless Wide Area Network Service Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-69560 Windows Work Folder Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-71336 Windows Work Folder Service Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-80075 Windows Work Folders Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-69619 Windows exFAT File System Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-68898 Windows iSCSI Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-69598 Windows iSCSI Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69628 Windows iSCSI Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-73025 Windows iSCSI Security Feature Bypass Vulnerability Important 9.8 No No SFB
CVE-2026-69839 Windows iSCSI Target Service Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-72927 Winsock Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-58611 Xbox Gaming Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-78455 Xbox Information Disclosure Vulnerability Important 4.3 No No Info
CVE-2026-84353 * Chromium: CVE-2026-84353 Use after free in Shared Tab Groups Critical N/A No No RCE
CVE-2026-84324 * Chromium: CVE-2026-84324 Use after free in Proxy High N/A No No RCE
CVE-2026-84325 * Chromium: CVE-2026-84325 Improper input validation in DataTransfer High N/A No No RCE
CVE-2026-84326 * Chromium: CVE-2026-84326 Uninitialized resource in V8 High N/A No No RCE
CVE-2026-84359 * Chromium: CVE-2026-84359 Information leak in Skia High N/A No No Info
CVE-2026-84357 * Chromium: CVE-2026-84357 Improper input validation in Omnibox High N/A No No RCE
CVE-2026-84349 * Chromium: CVE-2026-84349 Use after free in Browser High N/A No No RCE
CVE-2026-84351 * Chromium: CVE-2026-84351 Buffer overflow in GPU High N/A No No RCE
CVE-2026-84354 * Chromium: CVE-2026-84354 Incorrect authorization in FileSystem High N/A No No RCE
CVE-2026-84323 * Chromium: CVE-2026-84323 Missing authorization in FileSystem Medium N/A No No RCE
CVE-2026-84328 * Chromium: CVE-2026-84328 Missing authorization in FileSystem Medium N/A No No RCE
CVE-2026-84332 * Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings Medium N/A No No RCE
CVE-2026-84334 * Chromium: CVE-2026-84334 Incorrect authorization in Chromoting Medium N/A No No EoP
CVE-2026-84335 * Chromium: CVE-2026-84335 Incorrect authorization in TabStrip Medium N/A No No EoP
CVE-2026-84347 * Chromium: CVE-2026-84347 Use after free in WebRTC Medium N/A No No RCE
CVE-2026-84348 * Chromium: CVE-2026-84348 Information leak in MediaCapture Medium N/A No No Info
CVE-2026-84355 * Chromium: CVE-2026-84355 Incorrect authorization in Navigation Medium N/A No No EoP
CVE-2026-84358 * Chromium: CVE-2026-84358 Improper privilege management in Downloads Medium N/A No No EoP
CVE-2026-84327 * Chromium: CVE-2026-84327 Incorrect authorization in Autofill Low N/A No No Spoofing
CVE-2026-84329 * Chromium: CVE-2026-84329 Confused deputy in CredentialProvider Low N/A No No EoP
CVE-2026-84331 * Chromium: CVE-2026-84331 Incorrect authorization in Actor Low N/A No No SFB
CVE-2026-84350 * Chromium: CVE-2026-84350 Use after free in TabStrip Low N/A No No RCE
CVE-2026-84356 * Chromium: CVE-2026-84356 UI misrepresentation in FullScreen Low N/A No No Spoofing

* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.

** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.

† Indicates further administrative actions are required to fully address the vulnerability.

 

As with last month, I’ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.

There are roughly 90+ Critical rated bug remaining, and I’ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They’ve already been patched by Microsoft, so there’s no action for you. But don’t ignore the EoP in Spring Cloud Azure. It’s a complex scenario, but Microsoft still lists it as exploitation more likely. There’s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?).

From here on out, I’ll try to break things down by component rather than severity rating or impact. It may make it easier. We’ll see. ¯\_(ツ)_/¯

Windows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn’t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.

Windows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads “elevate privileges over a network” rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.

Windows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.

Exchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.

Microsoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook’s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word.

SharePoint Server: This month’s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above “Exploitation Less Likely”, but given SharePoint's recent history of “Less Likely” becoming “in the KEV catalog,” the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.

Microsoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here’s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378’s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.

Windows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server’s record handling: another single-component sweep, but this one lands on domain controllers. We’ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two “More Likely” unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.

Windows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague “in-network attacker calling arbitrary endpoints” phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where “requires physical access” describes every USB port in the building.

The USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic “in-network attacker calling arbitrary endpoints” boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.

Kerberos and the KDC: Six different bugs affect these components, but it’s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC — two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. “The server” here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them.

Exploitation More Likely: If you prioritize by Microsoft’s Exploit Index (XI), which I don’t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.

The Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).

No new advisories are being released this month.

Looking Ahead

The next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I’ll be back then to give you my full thoughts on the release – no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

Antes de ontemStream principal
  • ✇Zero Day Initiative - Blog
  • The August 2026 Security Update Review Dustin Childs
    I’ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the “new normal”, it’s time to readjust what we consider a true bug apocalypse. This month’s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full vid
     
  • ↗️

The August 2026 Security Update Review

✇Zero Day Initiative - Blog
Por:Dustin Childs
11 de Agosto de 2026, 14:56

I’ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the “new normal”, it’s time to readjust what we consider a true bug apocalypse. This month’s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here:

Adobe Patches for August 2026

For the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.

Here’s this month’s overview table:

Adobe Patches for August 2026

Adobe Patches for August 2026

Bulletin ID Product CVE Count Highest Severity Highest CVSS Exploited Deployment Priority
APSB26-90 Adobe ColdFusion 15 Critical 10.0 No 1
APSB26-123 Adobe Campaign Classic 3 Critical 10.0 No 1
APSB26-92 Adobe Commerce 7 Critical 9.1 No 2
APSB26-94 Adobe Lightroom Classic 11 Critical 8.6 No 3
APSB26-111 Content Credentials SDK 15 Critical 7.5 No 3
TOTAL 5 bulletins 51

If you’re running Campaign Classic, that’s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.

None of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.

Microsoft Patches for August 2026

There are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we’ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.

This volume of updates indeed seems to be the new normal – at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.

Again, we’ll start with the bug under active attack and move on from there.

-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
This bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as “Unproven” but calls this out as actively exploited. Somewhere, that math ain’t mathing.

-              CVE-2026-62878 - Windows DNS Server Remote Code Execution Vulnerability
There are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It’s a good ol’ fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn’t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.

 -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
This bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you’re using WDS for deployments in your enterprise.

 -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution Vulnerability
Here we have another remote, unauthenticated code execution bug that doesn’t require user interaction. This one is in the QUIC component. If you aren’t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.

 -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability
Don’t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn’t on by default. However, it’s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you’re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as “exploitation more likely”.

 -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege Vulnerability
There are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could “take over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.” This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft’s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don’t hurry up and schedule that downtime for your upgrade.

Here’s the full list of CVEs released by Microsoft for August 2026:

CVE Title Severity CVSS Public Exploited Type
CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No Yes EoP
CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability Important 7.8 Yes No EoP
CVE-2026-49163 ** Application Insights Profiler Elevation of Privilege Vulnerability Critical 8.8 No No EoP
CVE-2026-50481 ** Azure Active Directory Elevation of Privilege Vulnerability Critical 9.9 No No EoP
CVE-2026-68823 ** Azure Confidential Ledger Remote Code Execution Vulnerability Critical 9.1 No No RCE
CVE-2026-62869 ** Azure Entra ID Spoofing Vulnerability Critical 8.8 No No Spoofing
CVE-2026-56161 ** Azure Logic Apps Information Disclosure Vulnerability Critical 9.6 No No Info
CVE-2026-50515 ** Azure Service Bus Remote Code Execution Vulnerability Critical 9.9 No No RCE
CVE-2026-56162 ** Azure SQL Database Elevation of Privilege Vulnerability Critical 10 No No EoP
CVE-2026-63522 ** Azure SQL Database Elevation of Privilege Vulnerability Critical 7.8 No No EoP
CVE-2026-62836 ** Azure SQL Managed Instance Elevation of Privilege Vulnerability Critical 8.7 No No EoP
CVE-2026-62830 ** Azure SRE Agent Elevation of Privilege Vulnerability Critical 9.9 No No EoP
CVE-2026-62873 ** Microsoft 365 Admin Center Elevation of Privilege Vulnerability Critical 9.8 No No EoP
CVE-2026-50516 ** Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability Critical 9.4 No No EoP
CVE-2026-59115 ** Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability Critical 9.9 No No EoP
CVE-2026-68794 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-68816 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability Critical 8 No No EoP
CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-63519 Microsoft Office Graphics Component Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-63526 Microsoft Office Graphics Component Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-65664 Microsoft Office Graphics Component Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-63515 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-63532 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-64898 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-64903 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-64909 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-64910 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-64911 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-65657 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-70130 Microsoft Office Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-70332 ** Microsoft Office SharePoint Spoofing Vulnerability Critical 9.6 No No Spoofing
CVE-2026-63518 Microsoft Office Word Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-63525 Microsoft Office Word Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-64907 Microsoft Office Word Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-63508 ** Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability Critical 10 No No EoP
CVE-2026-59118 ** Microsoft Power Apps Elevation of Privilege Vulnerability Critical 9.3 No No EoP
CVE-2026-65668 ** Microsoft Purview eDiscovery Elevation of Privilege Vulnerability Critical 8.8 No No EoP
CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability Critical 8.8 No No EoP
CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability Critical 8.8 No No EoP
CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-62896 ** Microsoft Teams Elevation of Privilege Vulnerability Critical 9.6 No No EoP
CVE-2026-65667 ** Microsoft Teams Elevation of Privilege Vulnerability Critical 10 No No EoP
CVE-2026-62918 ** Microsoft Teams Spoofing Vulnerability Critical 7.5 No No Spoofing
CVE-2026-62824 Remote Desktop Client Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability Critical 7.8 No No EoP
CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability Critical 7.8 No No EoP
CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-70354 .NET Core Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-62901 .NET Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-58641 .NET Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62871 .NET Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62886 .NET Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62909 .NET Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62872 .NET Framework Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-65810 .NET Framework Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62897 .NET Framework Remote Code Execution Vulnerability Important 7 No No RCE
CVE-2026-62900 .NET Information Disclosure Vulnerability Important 5.9 No No Info
CVE-2026-62902 .NET Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-62899 .NET Security Feature Bypass Vulnerability Important 5.9 No No SFB
CVE-2026-65777 Active Directory Security Feature Bypass Vulnerability Important 5.3 No No SFB
CVE-2026-59130 AMD Zen Information Disclosure Vulnerability Important 5.6 No No Info
CVE-2026-59131 AMD Zen Information Disclosure Vulnerability Important 5.6 No No Info
CVE-2026-62898 Microsoft QUIC Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability Important 8.1 No No EoP
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-47299 Azure Monitor Agent Elevation of Privilege Vulnerability Important 7.2 No No EoP
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability Important 7.1 No No SFB
CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-64906 Microsoft Access Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-64908 Microsoft Access Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-64912 Microsoft Access Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-64914 Microsoft Access Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-64919 Microsoft Access Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-64920 Microsoft Access Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-54123 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-62698 Microsoft Digest Authentication Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-65673 Microsoft Entra Connect Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-68797 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-68799 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-68802 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-68808 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-68813 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70318 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70327 Microsoft Excel Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-70328 Microsoft Excel Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-65807 Microsoft Excel Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-68793 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68795 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68796 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68798 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68800 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68801 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68803 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68805 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68806 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68807 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68810 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68811 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68812 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68814 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68815 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-68817 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-62912 Microsoft Exchange Server Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 7.2 No No EoP
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 6.5 No No EoP
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability Important 6.5 No No SFB
CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability Important 7.3 No No Spoofing
CVE-2026-59133 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-68792 Microsoft Office Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62842 Microsoft Office Graphics Component Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-63517 Microsoft Office Graphics Component Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-66809 Microsoft Office Graphics Component Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-63524 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-63529 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-64899 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70314 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70315 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70317 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70323 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-63533 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-64904 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-65656 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-65661 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability Important 8 No No Spoofing
CVE-2026-70306 Microsoft Office SharePoint Spoofing Vulnerability Important 9.3 No No Spoofing
CVE-2026-63521 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-63528 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-63530 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-63531 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-64917 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-66806 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-66810 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70319 Microsoft Office Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-63527 Microsoft Office Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-64905 Microsoft Office Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-64915 Microsoft Office Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-70311 Microsoft Office Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-70329 Microsoft Outlook Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-62882 Microsoft Outlook Spoofing Vulnerability Important 4.3 No No Spoofing
CVE-2026-70313 Microsoft PowerPoint Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability Important 7.8 No No SFB
CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-70321 Microsoft SharePoint Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability Important 7.3 No No EoP
CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-65663 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-66805 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-64916 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-65660 Microsoft SharePoint Server Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability Important 6.5 No No Tampering
CVE-2026-65767 Microsoft Teams for Android and iOS Spoofing Vulnerability Important 8.8 No No Spoofing
CVE-2026-65769 Microsoft Teams iOS Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-65768 Microsoft Teams Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70310 Microsoft Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-58651 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-6726 * MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse Important 7.9 No No
CVE-2026-6727 * MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability Important 5.9 No No
CVE-2026-65811 Power BI Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-68809 Powerpoint Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70312 Powerpoint Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70316 Powerpoint Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70320 Powerpoint Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70322 Powerpoint Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70325 Powerpoint Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability Important 7.3 No No EoP
CVE-2026-58612 PowerShell Information Disclosure Vulnerability Important 7.4 No No Info
CVE-2026-65671 Remote Access API Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-65672 Remote Access API Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-61352 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-54113 Remote Procedure Call Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-62781 RPC Runtime Library Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 7 No No EoP
CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability Important 7.8 No No SFB
CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability Important 7.8 No No SFB
CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability Important 7.8 No No SFB
CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability Important 8.2 No No SFB
CVE-2026-62743 Win32k Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-62746 Win32k Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-62786 Win32k Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-62798 Win32k Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-49179 Windows Active Directory Domain Services Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-61348 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-65778 Windows Autopilot Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-65780 Windows Autopilot Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-65781 Windows Autopilot Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-65782 Windows Autopilot Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-65783 Windows Autopilot Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-61927 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-61934 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62705 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62722 Windows Bind Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62713 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62771 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62728 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62772 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62775 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-72971 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability Important 5.5 No No Tampering
CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability Important 5.5 No No SFB
CVE-2026-62710 Windows Device Association Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-65785 Windows DHCP Client Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-62736 Windows DHCP Client Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62755 Windows DHCP Client Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61361 Windows DHCP Client Remote Code Execution Vulnerability Important 7 No No RCE
CVE-2026-62761 Windows DHCP Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62776 Windows DHCP Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62803 Windows DHCP Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62807 Windows DHCP Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62812 Windows DHCP Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62714 Windows DHCP Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-62715 Windows DHCP Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-62716 Windows DHCP Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-62718 Windows DHCP Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-62720 Windows DHCP Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-62742 Windows DHCP Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-62745 Windows DHCP Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-62814 Windows DHCP Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-61923 Windows Display Enhancement Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62769 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-62778 Windows DNS Elevation of Privilege Vulnerability Important 8.1 No No EoP
CVE-2026-62881 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-62883 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-65795 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability Important 6.6 No No RCE
CVE-2026-62787 Windows DNS Server Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62888 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-59137 Windows Event Logging Service Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-61360 Windows GDI Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-65662 Windows GDI Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-62709 Windows GDI+ Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-62702 Windows Graphics Kernel Denial of Service Vulnerability Important 6.8 No No DoS
CVE-2026-61346 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62774 Windows Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-61928 Windows Hello Tampering Vulnerability Important 5.5 No No Tampering
CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability Important 6.5 No No Tampering
CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62739 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62741 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62811 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61368 Windows Hyper-V Information Disclosure Vulnerability Important 5 No No Info
CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61925 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-65774 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70345 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70346 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-70347 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-65681 Windows iSCSI Target Service Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-65796 Windows iSCSI Target Service Denial of Service Vulnerability Important 5.9 No No DoS
CVE-2026-65679 Windows iSCSI Target Service Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-62752 Windows Kerberos Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62766 Windows Kerberos Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62773 Windows Kerberos Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-61929 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-61930 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62708 Windows Kernel Elevation of Privilege Vulnerability Important 6.4 No No EoP
CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62749 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62780 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62788 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-65773 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62785 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-62795 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-62777 Windows License Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50472 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-70348 Windows Management Services Denial of Service Vulnerability Important 5.5 No No DoS
CVE-2026-62717 Windows Message Queuing Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62719 Windows Message Queuing Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-65790 Windows Message Queuing Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7.8 No No EoP
CVE-2026-62693 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No EoP
CVE-2026-62707 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-56174 Windows Narrator Braille Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-68819 Windows Network File System Denial of Service Vulnerability Important 5.9 No No DoS
CVE-2026-62700 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62797 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61350 Windows NTFS Information Disclosure Vulnerability Important 4.6 No No Info
CVE-2026-62793 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-62796 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-62887 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-65784 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability Important 7.3 No No EoP
CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62751 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61918 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-61921 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-61924 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-61356 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61367 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability Important 5.3 No No SFB
CVE-2026-61355 Windows Sensor Data Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62770 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62782 Windows SMB Client Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-62790 Windows SMBv3 Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-62800 Windows SMBv3 Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-59132 Windows TCP/IP Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-62792 Windows TCP/IP Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-59122 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-61353 Windows Telephony Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62701 Windows Telephony Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62724 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62725 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62726 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability Important 6.8 No No RCE
CVE-2026-61926 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62711 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62712 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62733 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62876 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-62885 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-65678 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-62730 Windows Wired AutoConfig Service Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-56179 Windows Network Address Translation (NAT) Spoofing Vulnerability Moderate 8.3 No No Spoofing

* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.

** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.

 

As with last month, I’ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.

Looking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10’s. These have already been mitigated by Microsoft and do not count towards today’s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it’s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as “exploitation more likely”. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there’s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.

Moving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1–8.8 tier is a grab bag with a common thread — LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that — all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.

There are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there’s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That’s five different products with the same underlying lesson about checking who’s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.

There are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks — all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  “broken crypto trust” are worth a second look despite the low scores.

Looking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely "leaks unspecified memory contents," differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.

Moving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.

There are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.

Finally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.

No new advisories are being released this month.

Looking Ahead

The next Patch Tuesday will be on September 8, just after Labor Day here is the US. I’ll be back then to give you my full thoughts on the release – no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

  • ✇Zero Day Initiative - Blog
  • The July 2026 Apple Security Update Review Dustin Childs
    Welcome to our monthly look at Apple security patches. This release shows that Apple is not immune to the bug apocalypse that is impacting other vendors. Last month, they released 37 unique CVEs compare to this month’s 210. Quite a jump.For July 2026, Apple released 210 unique CVEs across iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, watchOS 26.6, visionOS 26.6, and Safari 26.6. Since Apple doesn’t provide CVSS scores or other severity information, we’r
     
  • ↗️

The July 2026 Apple Security Update Review

✇Zero Day Initiative - Blog
Por:Dustin Childs
30 de Julho de 2026, 11:00

Welcome to our monthly look at Apple security patches. This release shows that Apple is not immune to the bug apocalypse that is impacting other vendors. Last month, they released 37 unique CVEs compare to this month’s 210. Quite a jump.

For July 2026, Apple released 210 unique CVEs across iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, watchOS 26.6, visionOS 26.6, and Safari 26.6. Since Apple doesn’t provide CVSS scores or other severity information, we’re left to speculate on which of these bugs is the most severe. However, there are a couple that stand out.

·      CVE-2026-43818 (ImageIO) – This bug could allow the “Processing [of] a maliciously crafted image may lead to arbitrary code execution." ImageIO is the classic zero-/one-click remote surface on Apple platforms (images auto-parsed in Messages, previews, notifications), so this is the highest real-world remote-exploitation risk in the release. It’s also present across iOS and all macOS versions. Depending on delivery path, this is the one most likely to be weaponized into a remote foothold.

·      CVE-2026-64747 (AVEVideoEncoder) – According to Apple, “An app may be able to execute arbitrary code with kernel privileges.” Kernel-level code execution is the maximum-impact outcome on an Apple device: full compromise, defeats the sandbox and most mitigations. It's also unusually broad, shipping to iOS/iPadOS, all three macOS versions, tvOS, watchOS, and visionOS. Local-app precondition is its only limiter, and it's exactly the second stage a remote bug chains into.

·      CVE-2026-64767 (afpfs) – In this case, “A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.” This bug is a network-reachable, apparently unauthenticated path to kernel memory corruption via Apple Filing Protocol. Remote plus kernel is a dangerous combination.  Also, the “remote attacker” versus “remote user” wording suggests no authentication required. This bug affects macOS only, which is the only reason it sits at #3 rather than higher.

Honorable mentions: CVE-2026-43776 (AppleDouble) and the SceneKit set (CVE-2026-64763/64/65/66) are additional file-parsing paths to arbitrary code execution. CVE-2026-43750 (Wi‑Fi) allows code execution out of the sandbox with elevated privileges. And finally, CVE-2026-64696 (SMB) / CVE-2026-43810 (Kernel) are further remote kernel-corruption bugs.

Here’s the full table of Apple patches and the products they affect:

Apple Security Updates — July 27, 2026 210Total CVEs 9Code Execution 26Elevation of Privilege 11Sandbox Escape 9Security Feature Bypass 15Memory Corruption 55Information Disclosure 2Spoofing / UI 75Denial of Service 8Other
Apple security release — July 27, 2026 (iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, watchOS 26.6, visionOS 26.6, Safari 26.6). "Yes/No" indicates whether each update is affected. CVE IDs link to NVD.
CVE ID Component Impact iOS / iPadOS 26.6 macOS Tahoe 26.6 macOS Sequoia 15.7.8 macOS Sonoma 14.8.8 tvOS 26.6 watchOS 26.6 visionOS 26.6 Safari 26.6
CVE-2026-64732 Accessibility An attacker with physical access may be able to access sensitive user data during iPhone Mirroring YesNoNoNoNoNoNoNo
CVE-2026-43749 Accounts An app may be able to gain root privileges NoYesYesYesNoNoNoNo
CVE-2026-43819 Accounts An app may be able to access sensitive user data NoYesNoNoNoNoNoNo
CVE-2026-64733 Accounts Framework An app may be able to fingerprint the user YesYesNoNoYesYesYesNo
CVE-2026-64767 afpfs A remote attacker may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo
CVE-2026-23918 apache A remote attacker may be able to cause a denial-of-service NoYesYesYesNoNoNoNo
CVE-2026-64695 APFS A remote user may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo
CVE-2026-43801 App Store An app may be able to access sensitive user data YesYesYesYesYesYesYesNo
CVE-2026-43781 Apple Account An app may be able to access sensitive user data NoYesYesYesNoNoNoNo
CVE-2026-64737 Apple Account A malicious app may be able to break out of its sandbox NoYesYesYesNoNoNoNo
CVE-2026-28928 Apple Neural Engine An app may be able to cause unexpected system termination YesYesNoNoYesYesNoNo
CVE-2026-43748 Apple Neural Engine An app may be able to cause unexpected system termination NoYesYesNoNoNoNoNo
CVE-2026-43776 AppleDouble Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution YesYesYesNoNoNoNoNo
CVE-2026-43681 AppleRAID A local user may be able to read kernel memory NoYesYesYesNoNoNoNo
CVE-2026-43672 Assets A malicious application may be able to bypass Privacy preferences NoYesYesYesNoNoNoNo
CVE-2026-43763 ATS An app may be able to read files outside of its sandbox NoYesYesYesNoNoNoNo
CVE-2026-64702 Audio An app may be able to break out of its sandbox NoYesYesYesNoNoNoNo
CVE-2026-64725 Audio An app may be able to cause a denial-of-service YesYesYesYesYesYesYesNo
CVE-2026-43730 AuthKit An app may be able to fingerprint the user YesYesNoNoYesYesYesNo
CVE-2026-64747 AVEVideoEncoder An app may be able to execute arbitrary code with kernel privileges YesYesYesYesYesYesYesNo
CVE-2026-64762 AVEVideoEncoder An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo
CVE-2026-64707 BackgroundAssets An app may be able to delete files for which it does not have permission YesYesYesYesNoNoYesNo
CVE-2026-28849 BOM A maliciously crafted ZIP archive may bypass Gatekeeper checks NoNoYesYesNoNoNoNo
CVE-2026-43811 Books An app may be able to modify protected parts of the file system YesNoNoNoNoNoNoNo
CVE-2026-64698 cd9660 An app may be able to cause unexpected system termination or read kernel memory NoYesYesYesNoNoNoNo
CVE-2026-43813 CloudAttestation A maliciously crafted app may be able to bypass code signing enforcement YesYesNoNoYesYesYesNo
CVE-2026-43797 Contacts An app may be able to access information about a user's contacts YesYesNoNoNoNoNoNo
CVE-2026-64734 Contacts Processing a maliciously crafted contact may leak sensitive data YesYesYesYesNoYesYesNo
CVE-2026-64746 Contacts An app may be able to add contacts without user authorization YesYesNoNoNoYesYesNo
CVE-2026-43756 Control Center An app may be able to access user-sensitive data NoYesYesYesNoNoNoNo
CVE-2026-43693 Core Services An app may be able to gain root privileges NoYesYesYesNoNoNoNo
CVE-2026-43673 CoreAudio Processing a maliciously crafted audio file may corrupt process memory YesYesYesYesYesYesYesNo
CVE-2026-43744 CoreAudio Processing an audio stream in a maliciously crafted media file may terminate the process YesYesYesYesYesYesYesNo
CVE-2026-43803 CoreAudio A remote attacker may be able to cause unexpected system termination YesYesYesYesYesYesYesNo
CVE-2026-43711 CoreMedia Processing a maliciously crafted video file may lead to unexpected app termination YesYesYesYesYesYesYesNo
CVE-2026-43759 CoreMedia An app may be able to access sensitive user data NoYesNoNoNoYesNoNo
CVE-2026-43775 CoreMedia An app may be able to access sensitive user data NoYesYesNoNoNoNoNo
CVE-2026-28936 CoreServices Processing a maliciously crafted file may lead to unexpected app termination NoNoYesYesNoNoNoNo
CVE-2026-43738 CoreUI Processing a maliciously crafted asset catalog may result in disclosure of process memory NoNoYesYesNoNoNoNo
CVE-2026-43802 CoreVideo An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo
CVE-2026-64710 Crash Reporter An app may be able to leak sensitive user information NoYesYesYesNoNoNoNo
CVE-2026-39875 CUPS A malicious app may be able to gain root privileges NoYesYesYesNoNoNoNo
CVE-2026-43698 CUPS An app may be able to gain root privileges NoNoYesYesNoNoNoNo
CVE-2026-3783 curl Authentication credentials may be sent to a server on another origin YesYesYesYesYesYesNoNo
CVE-2026-3784 curl Authentication credentials may be sent to a server on another origin YesYesYesYesYesYesNoNo
CVE-2026-43758 Data Detectors UI An app may be able to access sensitive user data NoYesYesYesNoYesNoNo
CVE-2026-64708 DesktopServices An app may bypass Gatekeeper checks NoYesYesYesNoNoNoNo
CVE-2026-28926 Disk Images An app may be able to elevate privileges NoNoYesYesNoNoNoNo
CVE-2026-28945 Disk Images An app may be able to bypass network restrictions NoYesYesYesNoNoNoNo
CVE-2026-43747 Disk Images Parsing a maliciously crafted file may lead to an unexpected app termination NoYesYesYesNoNoNoNo
CVE-2026-64694 Disk Images An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo
CVE-2026-64776 Disk Images An app may be able to disclose kernel memory NoYesYesYesNoNoNoNo
CVE-2026-43753 DriverKit An attacker with physical access to a locked device may be able to view sensitive user information YesYesYesYesNoNoNoNo
CVE-2026-43793 DriverKit An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo
CVE-2026-43714 Foundation A malicious app may be able to access protected user data YesYesYesYesNoYesYesNo
CVE-2026-64742 FrontBoard An app may be able to access sensitive user data YesNoNoNoYesYesYesNo
CVE-2026-43796 Game Center An app may be able to access sensitive user data YesYesYesYesYesYesYesNo
CVE-2026-64740 Game Center A malicious app may be able to break out of its sandbox YesYesYesYesYesNoNoNo
CVE-2026-64691 GPU Drivers An app may be able to cause unexpected system termination NoYesNoNoNoNoNoNo
CVE-2026-64692 Heimdal An app may be able to cause a denial-of-service YesYesYesYesYesYesYesNo
CVE-2026-28981 HFS Processing a maliciously crafted image may lead to arbitrary code execution NoYesYesYesNoNoNoNo
CVE-2026-43682 HFS A remote user may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo
CVE-2026-43710 HFS An attacker may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo
CVE-2026-43764 HFS An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo
CVE-2026-43767 HFS An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo
CVE-2026-43773 HFS Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo
CVE-2026-64697 HFS An app may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo
CVE-2025-43325 Icons An app may be able to access sensitive user data NoNoYesYesNoNoNoNo
CVE-2026-43661 ImageIO Processing a maliciously crafted image may corrupt process memory NoNoYesYesNoNoNoNo
CVE-2026-43780 ImageIO Processing a maliciously crafted texture may lead to unexpected app termination YesYesYesYesYesYesYesNo
CVE-2026-43818 ImageIO Processing a maliciously crafted image may lead to arbitrary code execution YesYesYesYesNoNoNoNo
CVE-2026-64693 ImageIO Processing a maliciously crafted image may lead to a denial-of-service YesYesYesYesYesYesYesNo
CVE-2026-64716 ImageIO Processing a maliciously crafted image may corrupt process memory YesYesYesYesYesYesYesNo
CVE-2026-64754 ImageIO Processing a maliciously crafted file may lead to a denial-of-service YesYesYesYesYesYesYesNo
CVE-2026-64758 ImageIO Processing a maliciously crafted file may lead to unexpected app termination YesYesNoNoYesYesYesNo
CVE-2026-43743 IOGPUFamily An app may be able to cause unexpected system termination NoNoNoNoYesYesNoNo
CVE-2026-43805 IOKit An app may be able to cause unexpected system termination or write kernel memory YesYesYesYesNoYesNoNo
CVE-2026-39877 IOSkywalkFamily An app may be able to disclose kernel memory NoNoYesYesNoNoNoNo
CVE-2026-28931 Kernel Connecting to a malicious NFS server may lead to kernel memory corruption YesYesNoNoYesYesNoNo
CVE-2026-28982 Kernel A remote user may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo
CVE-2026-39868 Kernel An app may be able to cause unexpected system termination or corrupt kernel memory NoNoYesYesYesYesYesNo
CVE-2026-43722 Kernel An app may be able to leak sensitive kernel state NoNoYesYesNoNoNoNo
CVE-2026-43724 Kernel An app may be able to cause unexpected system termination or write kernel memory NoNoYesYesYesYesYesNo
CVE-2026-43739 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesYesNo
CVE-2026-43754 Kernel An app may be able to leak sensitive kernel state NoYesYesYesNoNoNoNo
CVE-2026-43757 Kernel An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo
CVE-2026-43769 Kernel An app may be able to cause unexpected system termination YesYesYesYesYesYesYesNo
CVE-2026-43778 Kernel An app may be able to cause unexpected system termination or corrupt kernel memory YesYesYesYesYesYesYesNo
CVE-2026-43782 Kernel An app may be able to access sensitive user data NoYesYesYesNoNoNoNo
CVE-2026-43799 Kernel An app may be able to cause unexpected system termination YesYesYesYesYesYesYesNo
CVE-2026-43809 Kernel An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo
CVE-2026-43810 Kernel A remote user may be able to cause unexpected system termination or corrupt kernel memory YesYesYesYesYesYesYesNo
CVE-2026-43814 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesNoNo
CVE-2026-43816 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesYesNo
CVE-2026-43817 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesYesNo
CVE-2026-43822 Kernel An app may be able to cause unexpected system termination YesYesYesYesYesYesYesNo
CVE-2026-64700 Kernel An app may be able to cause unexpected system termination YesYesYesYesYesYesYesNo
CVE-2026-64709 Kernel An app may be able to disclose kernel memory YesYesYesYesYesYesYesNo
CVE-2026-64720 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesNoNo
CVE-2026-64721 Kernel An app may be able to access sensitive user data YesYesYesYesYesYesYesNo
CVE-2026-64723 Kernel An app may be able to access sensitive user data NoYesYesYesNoNoNoNo
CVE-2026-64727 Kernel An app may be able to cause unexpected system termination NoYesNoNoYesNoNoNo
CVE-2026-64729 Kernel An app may be able to cause unexpected system termination YesYesNoNoYesYesYesNo
CVE-2026-64735 Kernel A remote attacker may be able to bypass network filters YesYesYesYesYesYesYesNo
CVE-2026-64744 Kernel An app may be able to disclose kernel memory NoYesYesYesNoNoNoNo
CVE-2026-64749 Kernel An app may be able to cause unexpected system termination or corrupt kernel memory YesYesYesNoNoNoYesNo
CVE-2026-64751 Kernel An app may be able to cause unexpected system termination or write kernel memory YesYesNoNoYesYesYesNo
CVE-2026-64775 Kernel An app may be able to cause unexpected system termination YesYesYesYesYesYesYesNo
CVE-2026-20672 LaunchServices An app may be able to access sensitive user data NoNoYesYesNoNoNoNo
CVE-2026-28983 LaunchServices A remote attacker may be able to cause a denial of service NoNoYesYesNoNoNoNo
CVE-2026-28900 libarchive A maliciously crafted ZIP archive may bypass Gatekeeper checks NoNoYesYesNoNoNoNo
CVE-2026-4424 libarchive Processing a maliciously crafted file may result in disclosure of process memory YesYesYesYesNoNoYesNo
CVE-2026-28973 libc A malicious app may be able to break out of its sandbox YesYesYesYesNoYesNoNo
CVE-2026-64739 Libnotify An attacker may be able to cause unexpected app termination YesYesYesYesYesYesYesNo
CVE-2026-43703 libxslt Processing maliciously crafted web content may lead to an unexpected process crash NoNoYesYesYesYesYesNo
CVE-2026-43706 libxslt Processing maliciously crafted web content may lead to an unexpected process crash NoNoYesYesYesYesYesNo
CVE-2026-43766 LoginWindow An attacker with physical access to a locked device may be able to view sensitive user information NoYesYesYesNoNoNoNo
CVE-2026-64743 Managed Configuration An app may be able to access sensitive user data YesYesNoNoYesYesYesNo
CVE-2026-64738 Maps A malicious app may be able to break out of its sandbox NoYesYesYesNoNoNoNo
CVE-2026-43653 mDNSResponder An attacker on the local network may be able to cause a denial-of-service NoNoYesNoNoNoNoNo
CVE-2026-43806 mDNSResponder A local attacker may be able to cause a denial of service NoYesNoNoNoNoNoNo
CVE-2026-64724 mDNSResponder An attacker on the local network may be able to cause a denial-of-service YesYesYesYesYesYesYesNo
CVE-2026-43723 MediaRemote An app may be able to gain root privileges YesYesYesYesYesYesYesNo
CVE-2026-28911 Metal A malicious app may be able to corrupt memory of a system process NoYesNoYesNoNoNoNo
CVE-2026-43807 MobileAccessoryUpdater A malicious accessory may be able to cause unexpected app termination NoNoYesYesYesYesYesNo
CVE-2026-43729 Model I/O Processing a maliciously crafted image may corrupt process memory YesYesYesNoYesNoYesNo
CVE-2026-43733 Model I/O Processing a maliciously crafted image may corrupt process memory YesYesYesNoNoNoNoNo
CVE-2026-64722 Model I/O Processing a 3D model may result in disclosure of process memory YesYesYesNoNoNoNoNo
CVE-2026-64768 Model I/O A remote attacker may cause an unexpected app termination YesYesYesYesYesNoYesNo
CVE-2026-64769 Model I/O A remote attacker may be able to cause unexpected application termination or heap corruption YesYesYesYesYesNoYesNo
CVE-2026-64770 Model I/O A remote attacker may be able to cause unexpected application termination or heap corruption YesYesYesYesYesNoYesNo
CVE-2026-64771 Model I/O A remote attacker may be able to cause unexpected application termination or heap corruption YesYesYesNoYesNoYesNo
CVE-2026-64772 Model I/O A remote attacker may be able to cause unexpected application termination or heap corruption YesYesYesNoYesNoYesNo
CVE-2026-64774 Model I/O A remote attacker may be able to cause unexpected application termination or heap corruption YesYesYesYesYesNoYesNo
CVE-2026-43771 Net-SNMP An app may be able to cause a denial-of-service NoYesYesYesNoNoNoNo
CVE-2026-43772 NetFSFramework An app may be able to break out of its sandbox NoYesYesYesNoNoNoNo
CVE-2026-28961 Network Extensions An attacker with physical access to a locked device may be able to view sensitive user information NoNoYesYesNoNoNoNo
CVE-2026-64711 NSColorPanel An app may be able to leak sensitive user information YesYesYesYesNoNoNoNo
CVE-2026-28912 PackageKit A user may be able to elevate privileges NoYesYesNoNoNoNoNo
CVE-2026-43765 PackageKit An app may be able to modify protected parts of the file system NoYesYesYesNoNoNoNo
CVE-2026-28896 ppp An attacker may be able to cause unexpected system termination or read kernel memory NoNoYesYesNoNoNoNo
CVE-2026-64731 Printing A malicious app may be able to break out of its sandbox NoYesYesNoNoNoNoNo
CVE-2026-43812 Pro Res An app may be able to cause unexpected system termination YesYesYesNoYesNoYesNo
CVE-2026-43694 quarantine An app may be able to cause unexpected system termination or write kernel memory NoYesYesYesNoNoNoNo
CVE-2026-39874 Remote Management A malicious app may be able to gain root privileges NoYesYesYesNoNoNoNo
CVE-2026-43792 Safari An app may be able to access sensitive user data NoYesNoNoNoNoNoYes
CVE-2026-64741 Sandbox Profiles An app may be able to read a persistent device identifier YesNoNoNoYesYesYesNo
CVE-2026-64763 SceneKit Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution YesYesYesYesYesYesYesNo
CVE-2026-64764 SceneKit Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution YesYesYesYesYesYesYesNo
CVE-2026-64765 SceneKit Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution YesYesYesYesYesYesYesNo
CVE-2026-64766 SceneKit Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution YesYesYesYesYesYesYesNo
CVE-2026-43665 Screen Sharing Server A local attacker may be able to determine the legacy VNC password configured for Screen Sharing NoNoYesYesNoNoNoNo
CVE-2026-43760 Screen Sharing Server An app may be able to access user-sensitive data NoYesNoYesNoNoNoNo
CVE-2026-43777 Screen Sharing Server A remote attacker may be able to cause a denial of service NoYesYesYesNoNoNoNo
CVE-2026-43779 Screen Sharing Server An app may be able to intercept network connections intended for another process NoYesYesYesNoNoNoNo
CVE-2026-43728 Security An attacker may be able to modify the state of the Keychain NoYesNoNoNoNoNoNo
CVE-2026-43755 SecurityAgent An app may be able to gain root privileges NoYesNoYesNoNoNoNo
CVE-2026-43800 Siri An app may be able to access sensitive user data YesYesNoNoYesYesNoNo
CVE-2026-64745 Siri A person with physical access to a locked device may be able to access contacts and photos NoYesYesNoNoNoNoNo
CVE-2026-39873 SMB Connecting to a malicious SMB server may lead to unexpected system termination NoYesYesYesNoNoNoNo
CVE-2026-64696 SMB A remote user may be able to cause unexpected system termination or corrupt kernel memory NoYesYesYesNoNoNoNo
CVE-2026-64704 SMB An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo
CVE-2026-43774 Spotlight An app may be able to access sensitive user data NoYesYesYesNoNoNoNo
CVE-2026-43770 StorageKit An app may be able to access sensitive user data NoYesYesYesYesNoNoNo
CVE-2026-43768 udf An app may be able to cause unexpected system termination NoYesYesYesNoNoNoNo
CVE-2026-43704 Web Extensions A malicious web extension may be able to cause an unexpected process crash NoNoNoNoYesYesYesNo
CVE-2026-64699 WebDAV An app may be able to disclose kernel memory NoYesYesYesNoNoNoNo
CVE-2026-64703 WebDAV An app may be able to cause a denial-of-service NoYesYesYesNoNoNoNo
CVE-2026-39872 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo
CVE-2026-43663 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo
CVE-2026-43676 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoNoYesYesNo
CVE-2026-43699 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo
CVE-2026-43700 WebKit Processing maliciously crafted web content may disclose sensitive user information NoNoNoNoYesYesYesNo
CVE-2026-43701 WebKit A malicious website may be able to process restricted web content outside the sandbox NoNoNoNoYesYesYesNo
CVE-2026-43705 WebKit Processing maliciously crafted web content may lead to memory corruption NoNoNoNoYesYesYesNo
CVE-2026-43707 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo
CVE-2026-43708 WebKit A malicious website may exfiltrate data cross-origin NoNoNoNoYesYesYesNo
CVE-2026-43709 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo
CVE-2026-43712 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo
CVE-2026-43713 WebKit Visiting a website may leak sensitive data NoNoNoNoYesYesYesNo
CVE-2026-43715 WebKit Processing maliciously crafted web content may lead to memory corruption NoNoNoNoYesYesYesNo
CVE-2026-43725 WebKit A malicious website may be able to process restricted web content outside the sandbox NoNoNoNoYesYesYesNo
CVE-2026-43726 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo
CVE-2026-43727 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoNoYesYesNo
CVE-2026-43731 WebKit Processing maliciously crafted web content may lead to memory corruption NoNoNoNoYesYesYesNo
CVE-2026-43732 WebKit Processing maliciously crafted web content may disclose sensitive user information NoNoNoNoYesYesYesNo
CVE-2026-43734 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo
CVE-2026-43735 WebKit A malicious website may exfiltrate data cross-origin NoNoNoNoYesYesYesNo
CVE-2026-43740 WebKit Processing maliciously crafted web content may result in the disclosure of process memory YesNoNoNoYesYesYesYes
CVE-2026-43742 WebKit Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo
CVE-2026-43745 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoYesYesYesNo
CVE-2026-43804 WebKit Visiting a website may lead to an app denial-of-service YesYesNoNoNoNoYesYes
CVE-2026-43821 WebKit An app may be able to read files outside of its sandbox YesYesNoNoYesYesYesYes
CVE-2026-64713 WebKit Websites may know if the user has visited a given link YesYesNoNoYesYesYesYes
CVE-2026-64728 WebKit Maliciously crafted web content may violate iframe sandboxing policy YesYesNoNoYesYesYesYes
CVE-2026-64730 WebKit Visiting a website that frames malicious content may lead to UI spoofing YesYesNoNoYesYesYesYes
CVE-2026-64757 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash YesYesNoNoNoYesYesYes
CVE-2026-64783 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash YesYesNoNoNoYesYesYes
CVE-2026-43720 WebKit Canvas Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoYesYesYesNo
CVE-2026-64718 WebKit Canvas Processing maliciously crafted web content may lead to an unexpected Safari crash YesYesNoNoYesYesYesYes
CVE-2026-43721 WebKit Storage A malicious website may be able to silently hijack clipboard data NoNoNoNoYesYesYesNo
CVE-2026-28979 WebRTC Processing maliciously crafted web content may lead to an unexpected process crash NoNoNoNoYesYesYesNo
CVE-2026-43717 WebRTC Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoYesYesNoNo
CVE-2026-43718 WebRTC Processing maliciously crafted web content may lead to an unexpected Safari crash NoNoNoNoYesYesYesNo
CVE-2026-64719 WebRTC Processing maliciously crafted web content may lead to an unexpected Safari crash YesYesNoNoYesYesYesYes
CVE-2026-43750 Wi-Fi An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges NoYesYesYesNoNoNoNo
CVE-2026-64726 Wi-Fi An attacker in physical proximity may be able to corrupt process memory YesYesNoNoYesYesYesNo
CVE-2026-64755 WorkoutKit An app may be able to access sensitive user data YesNoNoNoNoNoNoNo
CVE-2026-28932 xar An app may be able to cause a denial of service NoYesYesYesNoNoNoNo
CVE-2026-28914 zip A maliciously crafted ZIP archive may bypass Gatekeeper checks NoNoYesYesNoNoNoNo

We’ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.

  • ✇Zero Day Initiative - Blog
  • Pwn2Own Ireland 2026 – New Targets and Categories Dustin Childs
    If you just want to read the rules, you can find them here.  Pwn2Own Ireland returns for 2026, and it’s the third year for this event in the Emerald Isle. Despite the dreary Irish skies (and the threat of a random banshee), we had an amazing event, even if we did end up in a jail at the end. With that in mind, we’re excited to return to Cork this fall for yet another great Pwn2Own event. We’ll also be returning to some of the great pubs Ireland has to offer in the evenings and wrapping the event
     
  • ↗️

Pwn2Own Ireland 2026 – New Targets and Categories

✇Zero Day Initiative - Blog
Por:Dustin Childs
21 de Julho de 2026, 14:23

If you just want to read the rules, you can find them here.

 

Pwn2Own Ireland returns for 2026, and it’s the third year for this event in the Emerald Isle. Despite the dreary Irish skies (and the threat of a random banshee), we had an amazing event, even if we did end up in a jail at the end. With that in mind, we’re excited to return to Cork this fall for yet another great Pwn2Own event. We’ll also be returning to some of the great pubs Ireland has to offer in the evenings and wrapping the event up at a special location (stay tuned for that announcement).

As for the contest itself, it will run from October 6-9, 2026. As always, we’ll have a random drawing to determine the schedule of attempts on the first day of the contest, and we will proceed from there. Registration closes at 5:00 p.m. Irish Standard Time on Oct 1st, 2026. There are no exceptions for late entries, so if you have questions, please contact us at pwn2own@trendmicro.com (note the address). We will be happy to address your issues or concerns directly.

Due to the overwhelming amount of registrations and last-minute entries for our Pwn2Own Berlin event, we’re changing who can enter the contest a bit to ensure it’s fair for all researchers. To enter, you must have received an aggregate bounty payment totaling at least $15,000 during their life-time participation in ZDI. This includes past Pwn2Own events and our regular bug bounty program. We recognize there may be some who haven’t participated in the past with great exploits to demonstrate, so we will also accept up to 10 new contestants at our discretion. We’re capping the number of entries to 80 this year. Once we have 80 qualifying entries, we will close registration. That means if you want to enter, it is in your best interest to contact us sooner rather than later. Please read the rules thoroughly to ensure you meet all the requirements.

Now on to this year’s target categories. We’ll have seven different categories for this year’s event:


-- Mobile Phones
-- Smart Home Devices
-- Wellness
-- Printers
-- Messaging
-- AI Infrastructure
-- AI Coding Agents

Let’s take a look at each category in more detail, starting with mobile phones.

The Target Phones

Back in Amsterdam where this contest originated, it was originally dubbed “Mobile Pwn2Own” and our focus was strictly on phones. Mobile handsets remain at the heart of this event, and some of the Samsung entries from last year were absolutely smashing. As always, these phones will be running the latest version of their respective operating systems with all available updates installed. Last year we also introduced the USB attack vector, but no one submitted an entry for it. We’ll see if that changes this year.

Otherwise, contestants must compromise the device by browsing to content in the default browser for the target under test or by communicating with the following short-distance protocols: near field communication (NFC), Wi-Fi, or Bluetooth. The awards for this category are:

Back to top

Smart Home Devices

As you might have noticed, we have eliminated most of the consumer-related devices from this year’s event. However, there are still a few “pro-sumer” devices that still could have an impact on enterprises, and the first of these categories are the devices that control other devices and services. An attempt in this category must be launched against the target’s exposed network services, RF attack surface, or exposed features from the contestant’s laptop within the contest network.

Back to top

Wellness Category

This is one of the new categories this year and our first foray into the world of healthcare devices. However, we don’t intend to make this too easy. Entries that require physically pressing any button on the target, or the use of any information, code or PIN printed on the device, are out of scope. Entries that require the contestant to be paired to the target prior to the start of the attempt are not in scope. An attempt in this category must be launched against the target’s exposed network services, RF attack surface, or exposed features from the contestant’s laptop within the contest network.

Back to top

Rage Against the Printers

Printers have long been the source of jokes and memes, but they are also an often overlooked attack surface in your office. The printer category always produces some interesting results, often by playing music it shouldn’t or the occasional Rick Roll. We’ve reduced the number of targets in this category this year, but we still expect to see some interesting exploits in these oft unheralded targets.

Back to top

The Messaging Category

We introduced WhatsApp as a target last year and came close to seeing a functioning exploit. Sadly, that didn’t happen. However, WhatsApp is used by more than three billion people globally, and some of the messages transmitted can be quite sensitive. That’s why we are bringing it back and hoping for some better results. We know the bugs are out there. We’re just hoping the right researcher decides to show us an exploit that leads to code execution. All of the target handset will be available as clients. Here’s the full prize list for Messaging category:

Back to top

AI Infrastructure Category

We introduced these targets at Pwn2Own Berlin, and we saw such…uh…enthusiasm from the community that we decided to immediately bring them back for our Ireland event. An attempt in this category must be launched from the contestant’s laptop. Here’s a look at the targets and awards in the AI Infrastructure category:

Back to top

AI Coding Agent Category

Let’s face it. At some point or another, we’ve probably all vibe coded something. There’s no shame in that, but how secure are the tools we use for vibe coding? Well, let’s take the most popular choices and find out. A successful entry must interact with a contestant-controlled resource (e.g. web page, repository, media file) to exploit a vulnerability within the coding agent. The attack vector of the entry must be a common coding agent use case. There are few things out of scope here as well. UI spoofing or misrepresentation unrelated to permission prompts, model jailbreaks or prompt outputs that do not cross security boundaries, and vulnerabilities that require unsafe or permission-less modes are just a few of the things not allowed. As this is a recently updated category, please read the rules carefully to ensure your entry qualifies. Here’s a look at the targets and awards in the AI Coding Agent category:

Back to top

Master of Pwn

No Pwn2Own contest would be complete without crowning a Master of Pwn, which signifies the overall winner of the competition. Earning the title results in a slick trophy, a different sort of wearable, and brings with it an additional 65,000 ZDI reward points (instant Platinum status in 2027).

For those not familiar with how it works, points are accumulated for each successful attempt. While only the first demonstration in a category wins the full cash award, each successful entry claims the full number of Master of Pwn points. Since the order of attempts is determined by a random draw, those who receive later slots can still claim the Master of Pwn title – even if they earn a lower cash payout. As with previous contests, there are penalties for withdrawing from an attempt once you register for it. If the contestant decides to remove an Add-on Bonus during their attempt, the Master of Pwn points for that Add-on Bonus will be deducted from the final point total for that attempt. For example, someone registers for the Apple iPhone 15 with the Kernel Bonus Add-on. During the attempt, the contestant drops the Kernel Bonus Add-on but completes the attempt. The final point total will be 20 Master of Pwn points.

The Complete Details

The full set of rules for Pwn2Own Ireland 2026 can be found here. They may be changed at any time without notice. We highly encourage potential entrants to read the rules thoroughly and completely should they choose to participate. We also encourage contestants to read this blog covering what to expect when participating in Pwn2Own.

Registration is required to ensure we have sufficient resources on hand at the event. Please contact ZDI at pwn2own@trendmicro.com to begin the registration process. (Email only, please; queries via social media, blog post, or other means will not be acknowledged or answered.) If we receive more than one registration for any category, we’ll hold a random drawing to determine the contest order. Registration closes at 5:00 p.m. Irish Standard Time on Oct 1st, 2025.

The Results

We’ll be blogging and tweeting results in real-time throughout the competition. Be sure to keep an eye on the blog for the latest information. Follow us on Twitter at @thezdi and @trendaisecurity, and keep an eye on the #P2OIreland hashtag for continuing coverage.

We look forward to seeing everyone in Cork, and we look forward to seeing what new exploits and attack techniques they bring with them.

 

©2026 Trend Micro Incorporated. All rights reserved. PWN2OWN, ZERO DAY INITIATIVE, ZDI, TrendAI, and Trend Micro are trademarks or registered trademarks of Trend Micro Incorporated. All other trademarks and trade names are the property of their respective owners.

  • ✇Zero Day Initiative - Blog
  • The July 2026 Security Update Review Dustin Childs
    Well folks. Here we are. The bug apocalypse has fully descended upon us. I’ll do my best to sort this out in some way meaningful, but this month’s release shows us the nay-sayers were right, and I’ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here:
     
  • ↗️

The July 2026 Security Update Review

✇Zero Day Initiative - Blog
Por:Dustin Childs
14 de Julho de 2026, 14:56

Well folks. Here we are. The bug apocalypse has fully descended upon us. I’ll do my best to sort this out in some way meaningful, but this month’s release shows us the nay-sayers were right, and I’ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here:

Adobe Patches for July 2026

Adobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I’ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We’ll see if other vendors follow their lead.

For the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.

Here’s this month’s overview table:

Bulletin ID Product CVE Count Highest Severity Highest CVSS Exploited Deployment Priority
APSB26-82 Adobe ColdFusion 13 Critical 9.9 No 1
APSB26-73 Adobe Commerce 13 Critical 9.6 No 2
APSB26-78 Adobe After Effects 3 Critical 7.8 No 3
APSB26-83 Adobe Animate 6 Critical 8.6 No 3
APSB26-71 Adobe Audition 6 Critical 7.8 No 3
APSB26-81 Adobe Bridge 6 Critical 7.8 No 3
APSB26-77 Adobe Creative Cloud Desktop Application 2 Critical 8.1 No 3
APSB26-74 Adobe Experience Manager 13 Critical 9.6 No 3
APSB26-79 Adobe Illustrator 5 Critical 9.3 No 3
APSB26-72 Adobe Media Encoder 5 Critical 7.8 No 3
APSB26-76 Adobe Premiere Pro 4 Critical 7.8 No 3
APSB26-80 Content Credentials SDK 12 Critical 8.2 No 3
TOTAL 12 bulletins 88

While nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you’re using these products, patch them. However, you can use you regular patch cadence here.

Microsoft Patches for July 2026

Here it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone’s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won’t cover here. Here’s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years’ totals.

The products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase “Windows components” does some pretty heavy lifting here, too, as just about everything you’ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.

So how do we eat this elephant? One byte at a time (pun intended). Let’s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.

-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege Vulnerability
This is one of several AD FS being patched this month, but it’s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.

-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege Vulnerability
The other bug being exploited in the wild this month is a modest CVSS 5.3 – but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.

-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
This patch rates the highest CVSS score for the month: a solid 9.9. It’s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn’t alone. If you’re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.

-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution Vulnerability
This matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it’s odd to see Microsoft list it as “Exploit Maturity Unknown” since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly.

-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability
This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there.

-    CVE-2026-55008 - Microsoft Exchange Server Spoofing Vulnerability
Ignore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it’s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session — no attachment needed, no macro warning, just viewing the message does it. If you’re using OWA, test and deploy this one quickly.

-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution Vulnerability
There are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.

-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution Vulnerability
Another Critical-rated bug, this one is caused by a race condition. It’s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don’t let the race condition lull you to sleep on a wormable bug.

-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability
File this in the “why not” category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid’s Minecraft server (it is your kid’s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.

Here’s the full list of CVEs released by Microsoft for July 2026:

CVE Title Severity CVSS Public Exploited Type
CVE-2026-56155 Active Directory Federation Services Elevation of Privilege Vulnerability Important 7.8 No Yes EoP
CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability Moderate 5.3 No Yes EoP
CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability Important 6.1 Yes No SFB
CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability Critical 8.8 No No EoP
CVE-2026-45499 ** Azure OpenAI Elevation of Privilege Vulnerability Critical 9.9 No No EoP
CVE-2026-48564 DHCP Server Service Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-50370 DHCP Server Service Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-56159 DHCP Server Service Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-50382 DirectX Graphics Kernel Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-41106 ** Microsoft 365 Copilot Elevation of Privilege Vulnerability Critical 9.3 No No EoP
CVE-2026-26145 ** Microsoft Azure Synapse Elevation of Privilege Vulnerability Critical 4.8 No No EoP
CVE-2026-48561 Microsoft Copilot Remote Code Execution Vulnerability Critical 9.6 No No RCE
CVE-2026-55011 Microsoft Defender Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55012 Microsoft Defender Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55944 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-57100 ** Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability Critical 9.9 No No EoP
CVE-2026-55041 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-54998 ** Microsoft Exchange Online Elevation of Privilege Vulnerability Critical 8.8 No No EoP
CVE-2026-55008 Microsoft Exchange Server Spoofing Vulnerability Critical 9.6 No No Spoofing
CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-50314 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-50467 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55018 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55022 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55045 Microsoft Office Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-55049 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55129 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55056 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55140 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55043 Microsoft PowerPoint Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55123 Microsoft PowerPoint Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55120 Microsoft PowerPoint Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-55040 Microsoft SharePoint Server Security Feature Bypass Vulnerability Critical 9.1 No No SFB
CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-56189 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-57090 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-57094 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-57087 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-57092 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability Critical 9.9 No No EoP
CVE-2026-55033 Microsoft Word Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55127 Microsoft Word Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55132 Microsoft Word Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-55010 Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-50474 Remote Desktop Client Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-49164 Windows Active Directory Domain Services Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-50518 Windows DHCP Server Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-49796 Windows GDI+ Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-50380 Windows GDI+ Remote Code Execution Vulnerability Critical 9.6 No No RCE
CVE-2026-54127 Windows Hyper-V Elevation of Privilege Vulnerability Critical 7.4 No No EoP
CVE-2026-50680 Windows Hyper-V Elevation of Privilege Vulnerability Critical 8.2 No No EoP
CVE-2026-50327 Windows Media Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-58542 Windows Media Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-58608 Windows Print Spooler Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-54982 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-54995 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-42982 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Critical 7.8 No No EoP
CVE-2026-50392 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Critical 7 No No EoP
CVE-2026-50694 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability Critical 8.8 No No EoP
CVE-2026-54999 Windows TCP/IP Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-47302 .NET Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50525 .NET Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50651 .NET Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-57108 .NET Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50524 .NET Framework Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50527 .NET Framework Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50648 .NET Framework Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50650 .NET Framework Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50646 .NET Framework Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50649 .NET Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-47304 .NET Security Feature Bypass Vulnerability Important 8.1 No No SFB
CVE-2026-50528 .NET Security Feature Bypass Vulnerability Important 8.2 No No SFB
CVE-2026-50659 .NET Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-50526 .NET Tampering Vulnerability Important 7 No No Tampering
CVE-2026-50682 Active Directory Denial of Service Vulnerability Important 7.1 No No DoS
CVE-2026-55001 Active Directory Domain Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50647 Active Directory Federation Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50684 Active Directory Federation Server Spoofing Vulnerability Important 4.8 No No Spoofing
CVE-2026-56170 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-47300 ASP.NET Core Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-47303 ASP.NET Core Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-50652 Azure Active Directory Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50653 Azure Active Directory Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-57969 Azure CycleCloud Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-58279 Azure CycleCloud Elevation of Privilege Vulnerability Important 6.5 No No EoP
CVE-2026-47632 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-50338 Azure Spring Apps Elevation of Privilege Vulnerability Important 8.2 No No EoP
CVE-2026-50488 Clipboard User Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50491 Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50427 Content Delivery Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50692 Desktop Window Manager Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-58633 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50296 DirectX Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50375 DirectX Graphics Kernel Elevation of Privilege Vulnerability Important 6.3 No No EoP
CVE-2026-50353 DirectX Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50493 DirectX Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-56643 DirectX Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-56644 DirectX Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58629 DirectX Graphics Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-49174 DNS Client Tampering Vulnerability Important 6.1 No No Tampering
CVE-2026-50495 DNS Client Tampering Vulnerability Important 6.1 No No Tampering
CVE-2026-57088 Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50663 Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-41109 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No SFB
CVE-2026-50510 GitHub Copilot Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-49787 HTTP.sys Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50420 HTTP.sys Information Disclosure Vulnerability Important 6.2 No No Info
CVE-2026-49788 HTTP/2 Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-58617 M365 Copilot for iOS Elevation of Privilege Vulnerability Important 8.1 No No EoP
CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability Important 8.1 No No Spoofing
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50305 Microsoft Brokering File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50361 Microsoft Brokering File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50658 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-56178 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability Important 5.5 No No EoP
CVE-2026-50657 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability Important 4.7 No No Info
CVE-2026-50329 Microsoft DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58541 Microsoft DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58596 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Important 8.3 No No EoP
CVE-2026-57991 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Important 7.4 No No Info
CVE-2026-58291 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Important 6.1 No No Info
CVE-2026-57981 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-57984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-57985 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.6 No No RCE
CVE-2026-57986 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-57988 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.1 No No RCE
CVE-2026-57992 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-58276 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-56645 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-57974 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-57975 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-58281 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 8.3 No No RCE
CVE-2026-58284 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 8.3 No No RCE
CVE-2026-58285 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 8.3 No No RCE
CVE-2026-58287 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 8.3 No No RCE
CVE-2026-58288 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 8.3 No No RCE
CVE-2026-58289 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 9 No No RCE
CVE-2026-58290 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-58292 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-58293 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-58294 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-57983 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Important 8.7 No No SFB
CVE-2026-58295 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Important 8.3 No No SFB
CVE-2026-58525 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Important 8.2 No No SFB
CVE-2026-57987 Microsoft Edge (Chromium-based) Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-58278 Microsoft Edge (Chromium-based) Spoofing Vulnerability Important 5.4 No No Spoofing
CVE-2026-56646 Microsoft Edge (Chromium-based) Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-57977 Microsoft Edge (Chromium-based) Spoofing Vulnerability Important 7.1 No No Spoofing
CVE-2026-57993 Microsoft Edge (Chromium-based) Spoofing Vulnerability Important 7.4 No No Spoofing
CVE-2026-58282 Microsoft Edge (Chromium-based) Spoofing Vulnerability Important 8.1 No No Spoofing
CVE-2026-58283 Microsoft Edge (Chromium-based) Spoofing Vulnerability Important 8.1 No No Spoofing
CVE-2026-58286 Microsoft Edge (Chromium-based) Spoofing Vulnerability Important 8.1 No No Spoofing
CVE-2026-58298 Microsoft Edge (Chromium-based) Spoofing Vulnerability Important 7.2 No No Spoofing
CVE-2026-58524 Microsoft Edge (Chromium-based) Spoofing Vulnerability Important 5.4 No No Spoofing
CVE-2026-58296 Microsoft Edge for Android Information Disclosure Vulnerability Important 7.1 No No Info
CVE-2026-58297 Microsoft Edge for Android Information Disclosure Vulnerability Important 7.1 No No Info
CVE-2026-58300 Microsoft Edge for Android Information Disclosure Vulnerability Important 6.2 No No Info
CVE-2026-58522 Microsoft Edge for Android Information Disclosure Vulnerability Important 6.8 No No Info
CVE-2026-58299 Microsoft Edge for Android Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-58523 Microsoft Edge for Android Security Feature Bypass Vulnerability Important 6.5 No No SFB
CVE-2026-50678 Microsoft Excel Information Disclosure Vulnerability Important 6.6 No No Info
CVE-2026-54988 Microsoft Excel Information Disclosure Vulnerability Important 6.1 No No Info
CVE-2026-48580 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50408 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55046 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55138 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55054 Microsoft Excel Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-55122 Microsoft Excel Information Disclosure Vulnerability Important 7.1 No No Info
CVE-2026-55898 Microsoft Excel Information Disclosure Vulnerability Important 6.1 No No Info
CVE-2026-50675 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55899 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55948 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-58618 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-47642 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55024 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55025 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55031 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55048 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55029 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55039 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55136 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55141 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55036 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55044 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55037 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55058 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55137 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55053 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55131 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-54131 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55947 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55949 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-56156 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55006 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-55009 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-55005 Microsoft Exchange Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50439 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-58537 Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-56193 Microsoft Office Information Disclosure Vulnerability Important 7.1 No No Info
CVE-2026-55023 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55026 Microsoft Office Information Disclosure Vulnerability Important 6.2 No No Info
CVE-2026-55027 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55028 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55047 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55035 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55057 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55121 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55042 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55139 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50665 Microsoft Office Information Disclosure Vulnerability Important 7.8 No No Info
CVE-2026-56192 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-56195 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-47290 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50301 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55017 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55125 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55133 Microsoft OneNote Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-58636 Microsoft PC Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability Important 8 No No Spoofing
CVE-2026-55052 Microsoft SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-55051 Microsoft SharePoint Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-55016 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-55019 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-55020 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-55021 Microsoft SharePoint Server Spoofing Vulnerability Important 7.3 No No Spoofing
CVE-2026-55030 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-55034 Microsoft SharePoint Server Spoofing Vulnerability Important 7.3 No No Spoofing
CVE-2026-55126 Microsoft SharePoint Server Spoofing Vulnerability Important 7.3 No No Spoofing
CVE-2026-55135 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-56157 Microsoft SharePoint Server Spoofing Vulnerability Important 5.4 No No Spoofing
CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-55002 Microsoft SQL Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-47295 Microsoft SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-50468 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-54116 Microsoft SQL Server Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability Important 8.1 No No EoP
CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50356 Microsoft Windows App Store Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-49165 Microsoft Windows App Store Information Disclosure Vulnerability Important 7.1 No No Info
CVE-2026-54993 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-58610 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55050 Microsoft Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55124 Microsoft Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55142 Microsoft Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-55032 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55055 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55038 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55134 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55128 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-55130 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50359 Microsoft XML Core Services Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability Important 6.4 No No SFB
CVE-2026-50346 Netlogon RPC Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50402 NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50506 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-45646 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-54989 Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50365 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-54990 Remote Desktop Client Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-58594 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-56190 Remote Desktop Protocol Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-49783 Secure Boot Security Feature Bypass Vulnerability Important 7.8 No No SFB
CVE-2026-42990 SQL Server ODBC driver Elevation of Privilege Vulnerability Important 9.8 No No EoP
CVE-2026-49168 Storage Spaces Direct Elevation of Privilege Vulnerability Important 6.2 No No EoP
CVE-2026-48581 Surface Broker SDMA Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-49180 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50455 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-54111 Universal Print Management Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-58543 Universal Print Management Service Elevation of Privilege Vulnerability Important 6.3 No No EoP
CVE-2026-58601 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Important 7.8 No No EoP
CVE-2026-50520 Visual Studio Code Remote Code Execution Vulnerability Important 8.4 No No RCE
CVE-2026-45496 Visual Studio Code Security Feature Bypass Vulnerability Important 5.5 No No SFB
CVE-2026-57101 Visual Studio Code Security Feature Bypass Vulnerability Important 7.1 No No SFB
CVE-2026-57102 Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No SFB
CVE-2026-47305 Visual Studio Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-49805 Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50297 Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50325 Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50489 Win32k Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-57095 Win32k Elevation of Privilege Vulnerability Important 6.2 No No EoP
CVE-2026-50416 Win32k Information Disclosure Vulnerability Important 3.3 No No Info
CVE-2026-56184 Win32k Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50432 Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability Important 5.3 No No DoS
CVE-2026-54119 Windows Active Directory Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-57976 Windows Active Directory Domain Services Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-50366 Windows Active Directory Domain Services Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-49178 Windows Active Directory Domain Services Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability Important 7.1 No No Info
CVE-2026-54983 Windows Active Directory Federation Services Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50695 Windows Active Directory Federation Services Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50304 Windows Active Directory Federation Services Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50368 Windows Active Directory Federation Services Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50324 Windows Active Directory Federation Services Denial of Service Vulnerability Important 5.9 No No DoS
CVE-2026-50355 Windows Active Directory Federation Services Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50411 Windows Active Directory Federation Services Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-58631 Windows Admin Center (WAC) Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-56196 Windows Admin Center (WAC) Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-56197 Windows Admin Center (WAC) Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-56169 Windows Admin Center Elevation of Privilege Vulnerability Important 8.1 No No EoP
CVE-2026-57107 Windows Admin Center Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-56185 Windows Admin Center Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-50312 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 4.7 No No EoP
CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50331 Windows Application Model Core API Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-49803 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50351 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50440 Windows Audio Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34328 Windows Audio Service Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50406 Windows Backup Engine Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50364 Windows Backup Service Elevation of Privilege Vulnerability Important 7.3 No No EoP
CVE-2026-42975 Windows Bluetooth Port Driver Remote Code Execution Important 8 No No RCE
CVE-2026-58538 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability Important 6 No No SFB
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50384 Windows Clip Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-49183 Windows Clipboard Server Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50689 Windows Clipboard Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50374 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 6.3 No No EoP
CVE-2026-58536 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58613 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50401 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50697 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50667 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50421 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50428 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability Important 7.1 No No Info
CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50302 Windows Cryptographic Services Security Feature Bypass Vulnerability Important 4.2 No No SFB
CVE-2026-55144 Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability Important 7.1 No No Tampering
CVE-2026-50347 Windows Data.dll Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-49181 Windows DHCP Client Elevation of Privilege Vulnerability Important 7.5 No No EoP
CVE-2026-50683 Windows DHCP Client Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-58627 Windows DHCP Server Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50685 Windows DHCP Server Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-49807 Windows DirectX Information Disclosure Vulnerability Important 6.2 No No Info
CVE-2026-49175 Windows DNS Client Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50487 Windows DNS Client Elevation of Privilege Vulnerability Important 8.1 No No EoP
CVE-2026-50465 Windows DNS Client Tampering Vulnerability Important 7.1 No No Tampering
CVE-2026-49169 Windows DNS Server Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-50426 Windows DNS Server Remote Code Execution Vulnerability Important 6.8 No No RCE
CVE-2026-50424 Windows Domain Controller Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-50300 Windows DWM Core Library Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50437 Windows DWM Core Library Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-50502 Windows Event Logging Service Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-33842 Windows File Explorer Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-40422 Windows File Explorer Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-41087 Windows File Explorer Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50473 Windows File Explorer Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50442 Windows File Explorer Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50389 Windows File Explorer Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50456 Windows File Explorer Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-57084 Windows File Explorer Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50405 Windows Filtering Platform Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-49172 Windows FTP Service Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-54122 Windows GDI+ Remote Code Execution Vulnerability Important 8.4 No No RCE
CVE-2026-50483 Windows Graphics Component Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-58609 Windows Graphics Component Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50391 Windows Group Policy Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50310 Windows Human Interface Device Information Disclosure Vulnerability Important 4.7 No No Info
CVE-2026-50485 Windows Hyper-V Denial of Service Vulnerability Important 4.5 No No DoS
CVE-2026-54129 Windows Hyper-V Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50315 Windows Image Acquisition Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58534 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-50490 Windows Installer Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-58540 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50425 Windows Internal System User Profile Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50293 Windows Internal Task Bar Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-49167 Windows Kernel Elevation of Privilege Vulnerability Important 4.7 No No EoP
CVE-2026-49173 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-54132 Windows Kernel Elevation of Privilege Vulnerability Important 6.8 No No EoP
CVE-2026-49795 Windows Kernel Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability Important 9.3 No No EoP
CVE-2026-49808 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50354 Windows Kernel Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-50332 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50377 Windows Kernel Elevation of Privilege Vulnerability Important 5.5 No No EoP
CVE-2026-50390 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50423 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50397 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50436 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50399 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50459 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50477 Windows Kernel Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-50478 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50484 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50673 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58532 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50294 Windows Kernel Information Disclosure Vulnerability Important 6.2 No No Info
CVE-2026-50316 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability Important 3.3 No No Info
CVE-2026-50463 Windows Kernel Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-50475 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50429 Windows Kernel Information Disclosure Vulnerability Important 8.2 No No Info
CVE-2026-58614 Windows Kernel Security Feature Bypass Vulnerability Important 5.5 No No SFB
CVE-2026-58545 Windows Kernel Security Feature Bypass Vulnerability Important 5.5 No No SFB
CVE-2026-58602 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50393 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50396 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50378 Windows Key Guard Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50303 Windows Key Guard Security Feature Bypass Vulnerability Important 5.5 No No SFB
CVE-2026-40378 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-49799 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-50371 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-58544 Windows Management Services Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50404 Windows Media Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50358 Windows Media Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50336 Windows Media Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50398 Windows Media Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-50414 Windows Media Elevation of Privilege Vulnerability Important 7.5 No No EoP
CVE-2026-50379 Windows Media Elevation of Privilege Vulnerability Important 7.5 No No EoP
CVE-2026-50433 Windows Media Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50676 Windows Media Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50677 Windows Media Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34349 Windows Media Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50394 Windows Media Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50415 Windows Media Information Disclosure Vulnerability Important 5.3 No No Info
CVE-2026-57083 Windows Media Photo Codec Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-54115 Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50447 Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-50505 Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-50342 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 8.8 No No EoP
CVE-2026-56183 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No EoP
CVE-2026-56187 Windows MIDI Service Module Elevation of Privileges Vulnerability Important 7 No No EoP
CVE-2026-58635 Windows Narrator Braille Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50500 Windows Netlogon Elevation of Privilege Vulnerability Important 7.5 No No EoP
CVE-2026-50476 Windows Network Connections Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50450 Windows Network Connections Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-56650 Windows Network File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-56649 Windows Network File System Remote Code Execution Vulnerability Important 5.9 No No RCE
CVE-2026-50470 Windows Network Policy Server SNMP Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-50496 Windows Network Policy Server SNMP Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-56194 Windows NFS Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-56648 Windows NFS Server Elevation of Privilege Vulnerability Important 7.5 No No EoP
CVE-2026-50337 Windows Notification Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-49789 Windows NTFS Elevation of Privilege Vulnerability Important 7.3 No No EoP
CVE-2026-50412 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50672 Windows NTFS Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-56175 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-56182 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-58640 Windows NTFS Remote Code Execution Vulnerability Important 7.3 No No RCE
CVE-2026-49184 Windows NTFS Remote Code Execution Vulnerability Important 8.4 No No RCE
CVE-2026-49797 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50308 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50386 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50309 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50313 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50388 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50448 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50471 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50461 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50417 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50482 Windows NTFS Remote Code Execution Vulnerability Important 7.3 No No RCE
CVE-2026-50494 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50686 Windows OLE Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-50335 Windows Operating Systems Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50317 Windows Operating Systems Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-54987 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50435 Windows Overlay Filter Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50409 Windows Overlay Filter Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-40400 Windows PowerShell Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-49166 Windows Print Configuration Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-55004 Windows Print Configuration Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50499 Windows Print Spooler Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability Important 6.1 No No Info
CVE-2026-57085 Windows Print Spooler Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50469 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50434 Windows Push Notification Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50339 Windows Push Notification Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50430 Windows Push Notification Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50334 Windows Push Notification Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-44800 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50363 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50431 Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50372 Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50666 Windows Remote Access Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-56647 Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-50330 Windows Remote Desktop Client Elevation of Privilege Vulnerability Important 7.5 No No EoP
CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-50504 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-58533 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-58535 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-58546 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-58539 Windows Remote Desktop Client Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-55003 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-57979 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-50445 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-50497 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-54126 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-57982 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-58626 Windows Remote Desktop Services Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-55014 Windows Remote Help Defense Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50318 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50407 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50357 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50441 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50668 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 6.8 No No EoP
CVE-2026-54109 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-49792 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-49793 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50362 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50492 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Important 6.8 No No RCE
CVE-2026-50501 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-58530 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-49791 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-50451 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Important 7.1 No No EoP
CVE-2026-57096 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50323 Windows Runtime Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50452 Windows Runtime Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50348 Windows Runtime Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50345 Windows Runtime Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50322 Windows Runtime Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50340 Windows Runtime Elevation of Privilege Vulnerability Important 8.5 No No EoP
CVE-2026-50410 Windows Runtime Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50449 Windows Runtime Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50460 Windows Runtime Elevation of Privilege Vulnerability Important 8.1 No No EoP
CVE-2026-50403 Windows Runtime Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50385 Windows Runtime Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-50413 Windows Runtime Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-50457 Windows Runtime Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50486 Windows Runtime Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50503 Windows Runtime Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-54125 Windows Runtime Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58527 Windows Runtime Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50373 Windows Search Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50679 Windows Search Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-44806 Windows Secure Channel Denial of Service Vulnerability Important 5.3 No No DoS
CVE-2026-50681 Windows Secure Channel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-56186 Windows Secure Channel Information Disclosure Vulnerability Important 8.1 No No Info
CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58619 Windows Sensor Data Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50311 Windows Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50328 Windows Server Update Service (WSUS) Tampering Vulnerability Important 7.5 No No Tampering
CVE-2026-58531 Windows SMB Elevation of Privilege Vulnerability Important 7.5 No No EoP
CVE-2026-54997 Windows SMB Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-49801 Windows SMB Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50690 Windows SMB Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-56168 Windows SMB Server Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-50360 Windows SMB Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-57089 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability Important 7.5 No No RCE
CVE-2026-50333 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50298 Windows Spaceport.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-49171 Windows Speech Runtime Elevation of Privilege Vulnerability Important 7.5 No No EoP
CVE-2026-49170 Windows StateRepository API Server file Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58526 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50299 Windows Storage Spaces Direct Remote Code Execution Vulnerability Important 6.8 No No RCE
CVE-2026-57968 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-57973 Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability Important 6.3 No No Tampering
CVE-2026-50418 Windows System Secure Feature Bypass Vulnerability Important 5.1 No No SFB
CVE-2026-50306 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50307 Windows TCP/IP Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50669 Windows Telephony Server Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-54124 Windows Terminal Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-50350 Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-50326 Windows Unified Consent System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-49790 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.3 No No EoP
CVE-2026-50498 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Important 5.5 No No EoP
CVE-2026-49794 Windows USB Audio Class Driver Information Disclosure Vulnerability Important 4.6 No No Info
CVE-2026-50453 Windows USB Audio Class Driver Information Disclosure Vulnerability Important 6.1 No No Info
CVE-2026-58528 Windows USB Audio Class Driver Information Disclosure Vulnerability Important 6.8 No No Info
CVE-2026-50321 Windows USB Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50479 Windows USB Hub Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability Important 6.4 No No EoP
CVE-2026-54991 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-54996 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-49802 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-49806 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-50674 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-49804 Windows USB Video Driver Elevation of Privilege Vulnerability Important 6.6 No No EoP
CVE-2026-50454 Windows User Interface Core Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-49176 Windows WalletService Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50480 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-56173 Windows WebView Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-54107 Windows Win32k Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-54986 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-54112 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-54114 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50670 Windows Win32k Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-50688 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-56176 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-58628 Windows Wireless Network Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-50295 Windows Zero Trust DNS Security Feature Bypass Vulnerability Important 5.5 No No SFB
CVE-2026-50509 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-55945 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Moderate 4.2 No No Info
CVE-2026-45488 Microsoft Edge (Chromium-based) Spoofing Vulnerability Moderate 5.4 No No Spoofing
CVE-2026-45489 Microsoft Edge (Chromium-based) Spoofing Vulnerability Moderate 6.5 No No Spoofing
CVE-2026-55145 Outlook Copilot Tampering Vulnerability Moderate 6.3 No No Tampering
CVE-2026-56181 Windows Network Address Translation (NAT) Spoofing Vulnerability Moderate 8.3 No No Spoofing
CVE-2026-58597 Microsoft Edge (Chromium-based) Spoofing Vulnerability Low 4.3 No No Spoofing

** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.

 

 

I’ll do my best to summarize everything else in this release, but no promises. I’m only human after all.

 

Looking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We’ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it’s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) — patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these “normal” as far as patch cadence goes.

That leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.

The pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) — WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.

And because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.

There are close to 260 EoP bugs in this month’s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there’s not much to add without further technical details about the bugs themselves. What’s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says “elevate privileges” with no detail. By my count, that leaves around 25 bugs to consider. Some don’t elevate at all. The FAQ literally says the attacker just gets “the rights of the user running the affected application.” That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I’ve seen really stands out too much.

There are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it’s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It’s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, “if this fails, nothing above it can be trusted” stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.

The July release includes 31Spoofing bugs this month, and we’ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let "just Spoofing" lull you into deprioritizing the patch cycle.

Of 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures — improper authorization, files/directories accessible to external parties, and link-following — plus Edge for Android exposing “private personal information” twice and two path-traversal bugs. The remaining 40+ are mostly one-line “exposure of sensitive information to an unauthorized actor” entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.

Only 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That’s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to “malicious uses” enabling tampering over the network. That’s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.

Still with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network. The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all “allocation of resources without limits or throttling”.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.

No new advisories are being released this month.

Looking Ahead

The next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I’ll be back then to give you my full thoughts on the release – no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

  • ✇Zero Day Initiative - Blog
  • The June 2026 Apple Security Update Review Dustin Childs
    We’re back with our look at the Apple macOS and iOS security updates. As this is a new feature for us, please let us know your feedback on the blog. For June 2026, Apple released 37 unique CVEs across iOS 26.5.2 / iPadOS 26.5.2, macOS Tahoe 26.5.2, Safari 26.5.2. Since Apple doesn’t provide CVSS scores or other severity information, we’re left to speculate on which of these bugs is the most severe. The overwhelming majority (31 of 37) are WebKit/WebRTC bugs reachable through malicious web conten
     
  • ↗️

The June 2026 Apple Security Update Review

✇Zero Day Initiative - Blog
Por:Dustin Childs
1 de Julho de 2026, 12:03

We’re back with our look at the Apple macOS and iOS security updates. As this is a new feature for us, please let us know your feedback on the blog.

For June 2026, Apple released 37 unique CVEs across iOS 26.5.2 / iPadOS 26.5.2, macOS Tahoe 26.5.2, Safari 26.5.2. Since Apple doesn’t provide CVSS scores or other severity information, we’re left to speculate on which of these bugs is the most severe. The overwhelming majority (31 of 37) are WebKit/WebRTC bugs reachable through malicious web content. Most of those are crash/DoS bugs rather than code execution, so the real risk lives in the small set of kernel bugs and the handful of WebKit sandbox escapes. However, there are a couple that stand out.

-    CVE-2026-43724 (Kernel) – According to Apple, “An app may be able to cause unexpected system termination or write kernel memory.” A kernel memory write is the highest-value primitive here: it's the privilege-escalation half of a full exploit chain and leads to complete device control. The bug was credited to Hyunwoo Kim (@v4bel), who is known to be a serious kernel researcher.

-    CVE-2026-39868 (Kernel) – Another kernel bug, this one could “cause unexpected system termination or corrupt kernel memory.” This is kernel memory corruption, and notably credited to a roster of elite offensive researchers (STAR Labs, Positive Technologies, Baidu Security). This kind of attribution usually signals a weaponizable, possibly Pwn2Own-grade bug rather than a theoretical crash.

-    CVE-2026-43725 / CVE-2026-43701 (WebKit) – Apple states these bugs could allow a website to process restricted web content outside the sandbox. I'm flagging this sandbox-escape pair over the many WebKit crash bugs because a sandbox escape is the bridge that turns a web-content bug into a path toward the kernel issues above. It's the most dangerous remotely-triggered class in the release.

Here’s a look at all the bugs released by Apple this month:

Apple Security Update – June 29, 2026 37Total CVEs 22Denial of Service 7Information Disclosure 3Memory Corruption 2Elevation of Privilege 2Sandbox Escape 1Spoofing
Apple security release — June 29, 2026. "Yes/No" indicates whether each update is affected. CVE IDs link to NVD.
CVE ID Component Impact iOS 26.5.2 / iPadOS 26.5.2 macOS Tahoe 26.5.2 Safari 26.5.2
CVE-2026-43743 IOGPUFamily An app may be able to cause unexpected system termination Yes Yes No
CVE-2026-39868 Kernel An app may be able to cause unexpected system termination or corrupt kernel memory Yes Yes No
CVE-2026-43722 Kernel An app may be able to leak sensitive kernel state Yes Yes No
CVE-2026-43724 Kernel An app may be able to cause unexpected system termination or write kernel memory Yes Yes No
CVE-2026-43703 libxslt Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes No
CVE-2026-43706 libxslt Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes No
CVE-2026-43704 Web Extensions A malicious web extension may be able to cause an unexpected process crash Yes Yes Yes
CVE-2026-39872 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes Yes
CVE-2026-43663 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes Yes
CVE-2026-43676 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash Yes Yes Yes
CVE-2026-43699 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes Yes
CVE-2026-43700 WebKit Processing maliciously crafted web content may disclose sensitive user information Yes Yes Yes
CVE-2026-43701 WebKit A malicious website may be able to process restricted web content outside the sandbox Yes Yes Yes
CVE-2026-43705 WebKit Processing maliciously crafted web content may lead to memory corruption Yes Yes Yes
CVE-2026-43707 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes Yes
CVE-2026-43708 WebKit A malicious website may exfiltrate data cross-origin Yes Yes Yes
CVE-2026-43709 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes Yes
CVE-2026-43712 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes Yes
CVE-2026-43713 WebKit Visiting a website may leak sensitive data Yes Yes Yes
CVE-2026-43715 WebKit Processing maliciously crafted web content may lead to memory corruption Yes Yes Yes
CVE-2026-43716 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash Yes Yes Yes
CVE-2026-43725 WebKit A malicious website may be able to process restricted web content outside the sandbox Yes Yes Yes
CVE-2026-43726 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes Yes
CVE-2026-43727 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash Yes Yes Yes
CVE-2026-43731 WebKit Processing maliciously crafted web content may lead to memory corruption Yes Yes Yes
CVE-2026-43732 WebKit Processing maliciously crafted web content may disclose sensitive user information Yes Yes Yes
CVE-2026-43734 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes Yes
CVE-2026-43735 WebKit A malicious website may exfiltrate data cross-origin Yes Yes Yes
CVE-2026-43740 WebKit Processing maliciously crafted web content may result in the disclosure of process memory Yes Yes Yes
CVE-2026-43742 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes Yes
CVE-2026-43745 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash Yes Yes Yes
CVE-2026-43720 WebKit Canvas Processing maliciously crafted web content may lead to an unexpected Safari crash Yes Yes Yes
CVE-2026-43721 WebKit Storage A malicious website may be able to silently hijack clipboard data Yes Yes Yes
CVE-2026-28979 WebRTC Processing maliciously crafted web content may lead to an unexpected process crash Yes Yes Yes
CVE-2026-43717 WebRTC Processing maliciously crafted web content may lead to an unexpected Safari crash Yes Yes Yes
CVE-2026-43718 WebRTC Processing maliciously crafted web content may lead to an unexpected Safari crash Yes Yes Yes
CVE-2026-43746 WebRTC Processing maliciously crafted web content may lead to an unexpected Safari crash Yes Yes Yes

We’ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.

  • ✇Zero Day Initiative - Blog
  • The June 2026 Security Update Review Dustin Childs
    I’ve made it through Pwn2Own Berlin, had a little vacation, and now I’m back for Patch Tuesday. Microsoft and Adobe didn’t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here:
     
  • ↗️

The June 2026 Security Update Review

✇Zero Day Initiative - Blog
Por:Dustin Childs
9 de Junho de 2026, 15:12

I’ve made it through Pwn2Own Berlin, had a little vacation, and now I’m back for Patch Tuesday. Microsoft and Adobe didn’t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here:

Adobe Patches for June 2026

For June, Adobe released 11 bulletins addressing 123 unique CVEs in Adobe Acrobat Reader, ColdFusion, Experience Manager, Experience Manager Forms, InDesign, InCopy, Substance 3D Sampler, Content Credentials SDK, Dreamweaver, Format Plugins, and Adobe Campaign Classic. A total of 11 of these CVEs were reported through the ZDI program.

Here’s this month’s overview table:

Bulletin ID Product CVE Count Highest Severity Highest CVSS Exploited Deployment Priority
APSB26-66 Adobe Campaign Classic 2 Critical 10.0 No 1
APSB26-64 Adobe ColdFusion 7 Critical 9.6 No 1
APSB26-63 Adobe Acrobat Reader 20 Critical 7.8 No 2
APSB26-57 Adobe Experience Manager Forms 3 Critical 9.3 No 2
APSB26-62 Adobe Dreamweaver 5 Critical 8.6 No 3
APSB26-65 Adobe Format Plugins 2 Critical 7.8 No 3
APSB26-59 Adobe InCopy 3 Critical 7.8 No 3
APSB26-58 Adobe InDesign 12 Critical 7.8 No 3
APSB26-60 Adobe Substance 3D Sampler 4 Critical 7.8 No 3
APSB26-61 Content Credentials SDK 8 Critical 7.5 No 3
APSB26-56 Adobe Experience Manager 57 Important 5.4 No 3
TOTAL 11 bulletins 123

Obviously, the update for Campaign Classic should be on the top of your deployment list if you’re a user. A CVSS 10 is rare; two in the same bulletin is pretty much a unicorn. Adobe says there are no active attacks, but I would expect heavy research into creating one. The update for Coldfusion is also a Priority 1, but again, no known attacks is the wild. I suspect the Reader patch will also receive a lot of attention as malicious PDFs are common in ransomware attacks. The update for Experience Manager may be large, but it’s mostly just cross-site scripting (XSS) bugs.

Microsoft Patches for June 2026

This month, Microsoft released a new record 208 CVEs Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Secure Boot, and BitLocker. At least, that’s my count. Microsoft’s tools seem to be having some issues, as they initially included a CVE from 2020 in this release. Regardless, the count is over 200, and I counted several times.

One of these bugs came through the ZDI program, but bugs submitted during Pwn2Own Berlin remain unpatched. If you include the Chromium and other third-party bugs, the total CVE count for June comes to a staggering 571 CVEs. 38 of these cases are rated Critical while the rest are rated Important in severity.

I’ve been counting CVEs on Patch Tuesday since 2017, and this is by far the largest monthly release in that time. The previous record was 177 set last year. It is extraordinary that Microsoft can produce so many patches in a single month, but it does raise concerns. How many of these cases were found using AI tools? How many patches were generated using AI to assist in coding or testing? What quality issues may exist in these patches? And likely most importantly, is this the new normal? The last two months were also large releases. Should sysadmins adjust their processes for prioritization and patch deployment based on this new volume of updates? Unfortunately, Microsoft is not providing those answers right now. Hopefully that changes in the future. BTW – just a note – the current number of CVEs shipped by Microsoft this year exceeds the total number of CVEs shipped in all of 2018.

One of the bugs patched by Microsoft this month is listed as under active exploitation and three others are listed as publicly known at the time of release. Let’s take a closer look at some of the more interesting updates for this month, starting with the bug being exploited in the wild.

-   CVE-2026-41091 - Microsoft Defender Elevation of Privilege Vulnerability
Since Microsoft doesn’t provide info on how widespread exploitation is, we must read some tea leaves. For this patch, several different people were acknowledged, which indicates multiple parties say this is in the wild, meaning exploitation is likely significant. The good news is that most people won’t need to take action as Defender updates itself. However, if you don’t have this configured or are in an isolated environment, you’ll need to update to the latest version.

-    CVE-2026-45657 - Windows Kernel Remote Code Execution Vulnerability
This CVSS 9.8 bug allows remote, unauthenticated attackers to execute code at SYSTEM level without user interaction. Yup – this is wormable. The problem lies in the way the kernel handles TCP/IP. This was listed as “Exploitation Less Likely” by Microsoft, but rest assured that every researcher and bug shop on the planet is reversing this patch right now trying to create an exploit. Test and deploy this patch quickly.

-    CVE-2026-47291 - HTTP.sys Remote Code Execution Vulnerability
Our second CVSS 9.8 bug of the month, this also allows remote, unauthenticated attackers to execute code on affected systems without user interaction. However, there is a caveat. Systems using the default MaxRequestBytes registry value used by the Windows HTTP stack are not affected by this bug. You can edit your registry settings if you need protection while you test and deploy the patch. The bulletin includes instructions and even a PowerShell script for doing this action. Microsoft lists this as “Exploitation more likely”, so I would definitely check your registry settings.

-    CVE-2026-44815 - DHCP Client Service Remote Code Execution Vulnerability
Here’s another CVSS 9.8 that has an odd incongruity. Although the CVSS says no permissions are required for exploitation, the write-up states it must be an “authenticated” user. I would err on the side of caution here and believe the CVSS. If that’s correct, then we have another bug where a remote, unauthenticated attacker could execute code on affected systems without user interaction. And since the DHCP client is on every OS, it’s a juicy target. This is another one to test and deploy with haste.

-    CVE-2026-45585/CVE-2026-50507 - Windows BitLocker Security Feature Bypass Vulnerability
If you’ve followed the ongoing saga of Nightmare Eclipse vs. MSRC, the bugs should look familiar. One is definitely a fix for “YellowKey”, while the other appears to be a fix for “GreenPlasma”. The researcher has promised a “bone shattering” drop on June 14, so let’s hope Microsoft is able to reach some understanding with the researcher before more 0-days are released. Also, there is a script provided by Microsoft as a mitigation, but the better strategy is to test and deploy the updates.

 Here’s the full list of CVEs released by Microsoft for June 2026:

CVE Title Severity CVSS Public Exploited XI Type
CVE-2026-41091 Microsoft Defender Elevation of Privilege Vulnerability Important 7.8 Yes Yes 0 EoP
CVE-2026-49160 HTTP.sys Denial of Service Vulnerability Important 7.5 Yes No 1 DoS
CVE-2026-50507 Windows BitLocker Security Feature Bypass Vulnerability Important 6.8 Yes No 1 SFB
CVE-2026-45586 Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability Important 7.8 Yes No 1 EoP
CVE-2025-10263 * ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] Critical 9.3 No No 2 EoP
CVE-2026-48567 Azure HorizonDB Elevation of Privilege Vulnerability Critical 10 No No N/A EoP
CVE-2026-32193 Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability Critical 8.8 No No 3 RCE
CVE-2026-47644 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability Critical 6.5 No No 2 Info
CVE-2026-44815 DHCP Client Service Remote Code Execution Vulnerability Critical 9.8 No No 2 RCE
CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability Critical 9.8 No No 1 RCE
CVE-2026-42824 M365 Copilot Information Disclosure Vulnerability Critical 6.5 No No N/A Info
CVE-2026-45476 Microsoft Azure Network Adapter Elevation of Privilege Vulnerability Critical 8.2 No No 2 EoP
CVE-2026-44810 Microsoft Cryptographic Services Elevation of Privilege Vulnerability Critical 8.4 No No 2 EoP
CVE-2026-48579 Microsoft Exchange Online Information Disclosure Vulnerability Critical 9.1 No No N/A Info
CVE-2026-47655 Microsoft Graph Information Disclosure Vulnerability Critical 6.5 No No N/A Info
CVE-2026-45497 Microsoft M365 Copilot Remote Code Execution Vulnerability Critical 7.7 No No N/A RCE
CVE-2026-45460 Microsoft Office Information Disclosure Vulnerability Critical 4.7 No No 3 Info
CVE-2026-45472 Microsoft Office Remote Code Execution Vulnerability Critical 8.4 No No 2 RCE
CVE-2026-45474 Microsoft Office Remote Code Execution Vulnerability Critical 8.4 No No 2 RCE
CVE-2026-45461 Microsoft Office Remote Code Execution Vulnerability Critical 8.4 No No 2 RCE
CVE-2026-45463 Microsoft Office Remote Code Execution Vulnerability Critical 8.4 No No 2 RCE
CVE-2026-45456 Microsoft Outlook and Word Remote Code Execution Vulnerability Critical 8.4 No No 2 RCE
CVE-2026-45458 Microsoft Outlook and Word Remote Code Execution Vulnerability Critical 8.4 No No 2 RCE
CVE-2026-47635 Microsoft Outlook and Word Remote Code Execution Vulnerability Critical 8.4 No No 2 RCE
CVE-2026-26142 Nuance PowerScribe Remote Code Execution Vulnerability Critical 9.8 No No 2 RCE
CVE-2026-47289 Remote Desktop Client Remote Code Execution Vulnerability Critical 8.8 No No 2 RCE
CVE-2026-47654 Remote Desktop Client Remote Code Execution Vulnerability Critical 7.5 No No 3 RCE
CVE-2026-48563 Remote Desktop Client Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-42992 Remote Desktop Client Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-44799 Remote Desktop Client Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-44801 Remote Desktop Client Remote Code Execution Vulnerability Critical 7.5 No No 2 RCE
CVE-2026-42985 Remote Desktop Client Remote Code Execution Vulnerability Critical 8.8 No No 1 RCE
CVE-2026-45648 Windows Active Directory Domain Services Remote Code Execution Vulnerability Critical 8.8 No No 3 RCE
CVE-2026-42987 Windows Deployment Services (WDS) Remote Code Execution Critical 8.1 No No 2 RCE
CVE-2026-33828 Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability Critical 7.8 No No 3 EoP
CVE-2026-44803 Windows Graphics Component Remote Code Execution Vulnerability Critical 7.8 No No 1 RCE
CVE-2026-44812 Windows Graphics Component Remote Code Execution Vulnerability Critical 7.8 No No 1 RCE
CVE-2026-45607 Windows Hyper-V Remote Code Execution Vulnerability Critical 8.4 No No 2 RCE
CVE-2026-45641 Windows Hyper-V Remote Code Execution Vulnerability Critical 8.4 No No 2 RCE
CVE-2026-47652 Windows Hyper-V Remote Code Execution Vulnerability Critical 8.2 No No 2 RCE
CVE-2026-47288 Windows Kerberos Key Distribution Center (KDC) Remote Code Execution Critical 7.1 No No 3 RCE
CVE-2026-45657 Windows Kernel Remote Code Execution Vulnerability Critical 9.8 No No 2 RCE
CVE-2026-48574 Windows Media Remote Code Execution Vulnerability Critical 7.8 No No 2 RCE
CVE-2026-45490 .NET SDK Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-45491 .NET Tampering Vulnerability Important 6.2 No No 3 Tampering
CVE-2026-45591 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No 2 DoS
CVE-2026-47643 Azure Stack Edge Remote Code Execution Vulnerability Important 9.8 No No 3 RCE
CVE-2026-41098 Azure Stack Edge Spoofing Vulnerability Important 8.4 No No 2 Spoofing
CVE-2026-45642 Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability Important 3.9 No No 2 Spoofing
CVE-2026-45650 Microsoft Bing Search Spoofing Vulnerability Important 4.3 No No 2 Spoofing
CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-45647 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability Important 5.5 No No 2 EoP
CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-44822 Microsoft Excel Information Disclosure Vulnerability Important 8.2 No No 3 Info
CVE-2026-45455 Microsoft Excel Information Disclosure Vulnerability Important 3.3 No No 2 Info
CVE-2026-45469 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-44817 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No 3 RCE
CVE-2026-44818 Microsoft Excel Remote Code Execution Vulnerability Important 7 No No 2 RCE
CVE-2026-44820 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-44823 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability Important 3.3 No No 2 SFB
CVE-2026-45504 Microsoft Exchange Server Elevation of Privilege Vulnerability Important 8.8 No No 3 EoP
CVE-2026-45502 Microsoft Exchange Server Information Disclosure Vulnerability Important 5 No No 3 Info
CVE-2026-45503 Microsoft Exchange Server Information Disclosure Vulnerability Important 8.1 No No 3 Info
CVE-2026-45583 Microsoft Exchange Server Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-45500 Microsoft Exchange Server Spoofing Vulnerability Important 6.1 No No 2 Spoofing
CVE-2026-45501 Microsoft Exchange Server Spoofing Vulnerability Important 6.5 No No 2 Spoofing
CVE-2026-47631 Microsoft Exchange Server Spoofing Vulnerability Important 8.1 No No 2 Spoofing
CVE-2026-42986 Microsoft Graphics Component Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-41092 Microsoft Kinect Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-45644 Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability Important 8 No No 2 EoP
CVE-2026-47293 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-45485 Microsoft Office Information Disclosure Vulnerability Important 3.3 No No 2 Info
CVE-2026-44821 Microsoft Office Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-45483 Microsoft Office Project Server Spoofing Vulnerability Important 4.6 No No 2 Spoofing
CVE-2026-45475 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-44819 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-44824 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-45645 Microsoft Office Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-49161 Microsoft PC Manager Security Feature Bypass Vulnerability Important 7.8 No No 3 SFB
CVE-2026-42902 Microsoft PowerToys Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-45484 Microsoft SharePoint Elevation of Privilege Vulnerability Important 8.8 No No 2 EoP
CVE-2026-45454 Microsoft SharePoint Remote Code Execution Vulnerability Important 6.5 No No 2 RCE
CVE-2026-47298 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8 No No 2 RCE
CVE-2026-45467 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No 2 Spoofing
CVE-2026-45468 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No 2 Spoofing
CVE-2026-45479 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No 2 Spoofing
CVE-2026-45453 Microsoft SharePoint Server Spoofing Vulnerability Important 5.4 No No 2 Spoofing
CVE-2026-47636 Microsoft SharePoint Server Spoofing Vulnerability Important 5.4 No No 2 Spoofing
CVE-2026-47637 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No 2 Spoofing
CVE-2026-47638 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No 2 Spoofing
CVE-2026-47639 Microsoft SharePoint Server Spoofing Vulnerability Important 5.4 No No 3 Spoofing
CVE-2026-47641 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No 2 Spoofing
CVE-2026-33113 Microsoft SharePoint Server Spoofing Vulnerability Important 5.4 No No 2 Spoofing
CVE-2026-45462 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No 2 Spoofing
CVE-2026-45464 Microsoft SharePoint Server Spoofing Vulnerability Important 5.4 No No 2 Spoofing
CVE-2026-45465 Microsoft SharePoint Server Spoofing Vulnerability Important 5.4 No No 2 Spoofing
CVE-2026-47634 Microsoft SharePoint Server Spoofing Vulnerability Important 7.3 No No 1 Spoofing
CVE-2026-47640 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No 3 Spoofing
CVE-2026-45481 Microsoft SharePoint Server Spoofing Vulnerability Important 7.3 No No 1 Spoofing
CVE-2026-48560 Microsoft SharePoint Server Spoofing Vulnerability Important 5.4 No No 2 Spoofing
CVE-2026-48562 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No 2 Spoofing
CVE-2026-42835 Microsoft Teams for Android Information Disclosure Vulnerability Important 8.1 No No 2 Info
CVE-2026-45606 Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability Important 5.5 No No 2 DoS
CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability Important 8.4 No No 2 SFB
CVE-2026-45466 Microsoft Word Information Disclosure Vulnerability Important 3.3 No No 3 Info
CVE-2026-45471 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-45486 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-45643 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-45457 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-42980 NT OS Kernel Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-42916 NT OS Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-45649 Office for Android Spoofing Vulnerability Important 7.1 No No 3 Spoofing
CVE-2026-47653 Remote Desktop Client Remote Code Execution Vulnerability Important 8.8 No No 3 RCE
CVE-2026-42909 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No 3 RCE
CVE-2026-42913 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No 3 RCE
CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability Important 7.5 No No 2 RCE
CVE-2026-45588 Secure Boot Security Feature Bypass Vulnerability Important 7.9 No No 2 SFB
CVE-2026-48568 Secure Boot Security Feature Bypass Vulnerability Important 7.9 No No 2 SFB
CVE-2026-48570 Secure Boot Security Feature Bypass Vulnerability Important 7.9 No No 2 SFB
CVE-2026-48573 Secure Boot Security Feature Bypass Vulnerability Important 7.9 No No 2 SFB
CVE-2026-48575 Secure Boot Security Feature Bypass Vulnerability Important 7.9 No No 2 SFB
CVE-2026-48576 Secure Boot Security Feature Bypass Vulnerability Important 7.9 No No 2 SFB
CVE-2026-48578 Secure Boot Security Feature Bypass Vulnerability Important 7.9 No No 2 SFB
CVE-2026-45654 Secure Boot Security Feature Bypass Vulnerability Important 7.9 No No 2 SFB
CVE-2026-45656 UEFI Secure Boot Security Feature Bypass Vulnerability Important 7.8 No No 2 SFB
CVE-2026-8863 UEFI Secure Boot Security Feature Bypass Vulnerability Important 7.8 No No 2 SFB
CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability Important 7.5 No No 2 EoP
CVE-2026-47281 Visual Studio Code Elevation of Privilege Vulnerability Important 9.6 No No 3 EoP
CVE-2026-47284 Visual Studio Code Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-47292 Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability Important 7.1 No No 2 SFB
CVE-2026-47287 Visual Studio Code Tampering Vulnerability Important 6.5 No No 2 Tampering
CVE-2026-42829 Windows Administrator Protection Secure Feature Bypass Vulnerability Important 7.8 No No 2 SFB
CVE-2026-34335 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-45601 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-45598 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-45596 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-45638 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-45603 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-42911 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-45594 Windows Application Identity (AppID) Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-45655 Windows BitLocker Security Feature Bypass Vulnerability Important 5.3 No No 2 SFB
CVE-2026-45658 Windows BitLocker Security Feature Bypass Vulnerability Important 7.8 No No 1 SFB
CVE-2026-45640 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-45605 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-47656 Windows Boot Manager Security Feature Bypass Vulnerability Important 7.9 No No 2 SFB
CVE-2026-44809 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-45634 Windows DHCP Client Information Disclosure Vulnerability Important 5.5 No No 3 Info
CVE-2026-45608 Windows DHCP Client Information Disclosure Vulnerability Important 6.8 No No 3 Info
CVE-2026-41108 Windows DNS Client Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-42905 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP
CVE-2026-44811 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-44808 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-44807 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-42983 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-44802 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-44813 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-44804 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-45602 Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability Important 9.1 No No 2 Tampering
CVE-2026-42836 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-42910 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-42972 Windows Hyper-V Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-45592 Windows Internet (wininet.dll) Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-42903 Windows Kerberos Denial of Service Vulnerability Important 6.5 No No 3 DoS
CVE-2026-42914 Windows Kerberos Denial of Service Vulnerability Important 5.3 No No 2 DoS
CVE-2026-48583 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-45653 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-42984 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-45600 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-45604 Windows Managed Installer Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-45595 Windows Mark of the Web Security Feature Bypass Vulnerability Important 5.4 No No 2 SFB
CVE-2026-45636 Windows NTFS Remote Code Execution Vulnerability Important 7.8 No No 2 RCE
CVE-2026-50508 Windows NTLM Spoofing Vulnerability Important 6.5 No No 1 Spoofing
CVE-2026-48565 Windows Narrator Braille Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-44805 Windows Network Controller (NC) Host Agent Denial of Service Vulnerability Important 5.5 No No 3 DoS
CVE-2026-42981 Windows Performance Monitor Remote Code Execution Vulnerability Important 8.1 No No 2 RCE
CVE-2026-42974 Windows Performance Monitor Remote Code Execution Vulnerability Important 8.1 No No 2 RCE
CVE-2026-45487 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-42828 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-42837 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-42969 Windows Push Notification Information Disclosure Vulnerability Important 5.5 No No 3 Info
CVE-2026-42971 Windows Push Notification Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-42970 Windows Push Notification Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-42973 Windows Push Notification Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-42978 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-42977 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-42979 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-42991 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No 3 EoP
CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Important 7.5 No No 2 Info
CVE-2026-42908 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Important 7.5 No No 2 Info
CVE-2026-45593 Windows SDK Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-42906 Windows Shell Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-42907 Windows Shell Information Disclosure Vulnerability Important 6.5 No No 2 Info
CVE-2026-47648 Windows Storage Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-42915 Windows TCP/IP Denial of Service Vulnerability Important 5.7 No No 2 DoS
CVE-2026-42904 Windows TCP/IP Elevation of Privilege Vulnerability Important 9.6 No No 3 EoP
CVE-2026-42968 Windows Telephony Server Information Disclosure Vulnerability Important 5.5 No No 2 Info
CVE-2026-42912 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No 2 EoP
CVE-2026-45597 Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability Important 7 No No 3 EoP
CVE-2026-45599 Windows UPnP Device Host Remote Code Execution Vulnerability Important 8.1 No No 2 RCE
CVE-2026-45635 Windows UPnP Device Host Remote Code Execution Vulnerability Important 8.1 No No 2 RCE
CVE-2026-40409 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-40404 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No 2 EoP
CVE-2026-42989 Winlogon Elevation of Privilege Vulnerability Important 7.8 No No 1 EoP

* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.

† Indicates further administrative actions are required to fully address the vulnerability.

 

Looking at the other Critical-rated bugs in this release, the scariest-looking one is actually nothing to concern yourself with at all. The CVSS 10 bug in Azure HorizonDB has already been addressed by Microsoft and is just being documented now. That’s also the case for five others. Of course, there wouldn’t be a release without Office bugs that have the Preview Pane as an attack vector. There are multiple in June. There’s a handful of bugs in the Remote Desktop Client, but these rely on connecting to a malicious RDP server. There are three patches for Hyper-V that allow for guest-to-host code execution. The bug in Active Directory requires authentication, but any authenticated user can hit it. For the Windows Directory Service vulnerability, it needs to be listening for TFTP. You have blocked that everywhere, right? The bug in Azure Network Adapter is somewhat unique as you need to update your Linux kernel to be protected. The bug in Azure Kubernetes allows an attacker to break out of a container and gain control of the AKS worker node. Finally, the bug in the Kerberos Key Distribution Center (KDC) seems unlikely, but if exploited, it could allow authenticated attackers to get code execution on affected systems.

Moving on to the other code execution bugs, there are the ubiquitous open-an-own bugs in Office components like Excel and Word. The code injection bug in Exchange Server looks troubling, but it requires a machine-in-the-middle (MiTM), so exploitation is unlikely. The bugs in SharePoint require authentication, but you should note that the patch applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. The two bugs in UPnP are interesting. Both can lead to code execution by causing an error during the handling of specially crafted data, which could lead to a Use After Free (UAF) bug. The bugs in RDP Client all require connecting to a malicious RDP server, but it’s not clear why some are rated Critical and some are rated Important. The NTFS vulnerability requires a user to mount a virtual hard drive on an affected system. The last RCE bug this month is in Azure Stack Edge and requires the attacker to send a specially crafted file upload request that includes a manipulated file name or path, leading to code execution.

There are more than 60 Elevation of Privilege (EoP) bugs in this month’s release, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there’s not much to add without further technical details about the bugs themselves. A notable exception is in Exchange Server, where a user on Outlook Web Access (OWA) could gain access to other mailboxes. The bug in Visual Studio Code could allow attackers to gain permissions associated with the MCP Server’s managed identity. The bugs in Windows SDK and Windows UI Automation Manager could let attacker go from low integrity up to medium integrity code execution. The bug in Bluetooth just allows “elevated” privileges without really describing what elevated might be.

Moving on to the more than 20 security feature bypass (SFB) bugs in the June release, there are a total of 10 that impact Secure Boot. All carry scope change (S:C) in the CVSS, meaning successful exploitation affects security boundaries beyond the vulnerable component itself — specifically the ability to load untrusted code at boot, bypass Virtual Secure Mode, and undermine boot integrity guarantees. CVE-2026-45654 explicitly calls out VSM exposure. The bulk of these are credited to Alon Leviev (STORM), which is notable given his prior BootKitty/BlackLotus-adjacent research. The bugs in the Windows Boot Manager have a similar impact as the Secure Boot bugs. The UEFI Secure Boot vulnerabilities go a layer deeper. They require either local admin or physical access but could allow for the running of untrusted code even before the OS loads. Rootkits anyone? The four bugs in BitLocker all require physical access but could yield encrypted data if exploited. The bug in Windows Administration Protection allows attackers to bypass the feature that prevents standard-user apps from performing admin-level actions. The bug in Visual Studio Copilot Chat could be the most interesting non-boot bug here as it allows authentication impersonation. Mark of the Web (MotW) and Excel vulns could bypass user warnings. Lastly, the bug in PC Manager bypasses expected user controls.

Turning our attention to the mass of spoofing bugs in the release, we instantly see 18 impacting SharePoint Server. Fortunately, these are simply cross-site scripting (XSS) bugs. It’s the Exchange bugs we should really watch for. One is an XSS that an attacker can exploit by convincing an Exchange administrator to open a malicious link or message, which then runs code in the admin's web session. That's a meaningful privilege escalation path. Another is listed as an SSRF-based attack, but no other details are available. The last is a lower-impact XSS with limited confidentiality/integrity loss. The bug in Bing Search (remember Bing?) is a classic search result spoofing. The bug in Azure Stack Edge is interesting as it could allow access to resources outside the vulnerable component's security boundary. The bug in Office for Android requires user interaction. The Office Project Server bug is an authenticated XSS with low impact. The final spoofing bug is in Azure Attestation but has already been addressed. You should still verify you are protected by following the instructions in the write-up from Microsoft.

There are 30 different information disclosure bugs in this release, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The two bugs in Visual Studio require user interaction and could “disclose information over a network.” How obtuse. The bug in GitHub Copilot and Visual Studio Code could disclose discloses a sign-in access token for a user's work account. That's a meaningful credential exposure, not just random memory. That leaves the two bugs in Exchange Server. One could allow an authenticated user to gain information about which network services that the Exchange server can reach. The other sounds much like the spoofing bug in OWA as it allows attackers to see information in mailboxes they should not have access to.

I’ve never been a fan of the “tampering” category, as it could mean so many different things. For example, the bug in .NET simply says it could allow an unauthorized attacker to perform tampering locally. Similarly, the bug in Visual Studio says the same, expect here the tampering occurs over a network. Microsoft doesn’t even bother with a CWE for the tampering bug in the DHCP Server, so your guess is as good as mine.

There are seven DoS bugs in the June release, and as usual, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting is the bug in HTTP.sys, which is listed as publicly known. This is an uncontrolled resource consumption, rated "Exploitation More Likely," and publicly disclosed. Since, HTTP.sys sits at the core of IIS and Windows web services, a network-accessible DoS here can take down any Windows server running HTTP-based services. Based on the Acknowledgement, it looks like this bug may have been found using AI. There are no real details for the other bugs, but based simply on the impact, I would focus on the Kerberos and TCP/IP bugs if you had to prioritize.

No new advisories are being released this month.

Looking Ahead

The next Patch Tuesday will be on July 14 and will be the last one before Black Hat/DEFCON. It’s usually a big release, so strap in and hang on. I’ll be back then to give you my full thoughts. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

 

  • ✇Zero Day Initiative - Blog
  • Pwn2Own Berlin 2026: Day Three Results and Master of Pw Dustin Childs
    Following two days of intense competition, Day Three of Pwn2Own Berlin 2026 brought the curtain down on an incredible event. Security researchers delivered their final exploits, pushing enterprise systems to the limit one last time as the race for Master of Pwn came to a close.Day Three added to an already historic event, bringing the final totals to $1,298,250 awarded for 47 unique 0-day vulnerabilities across three days of competition. DEVCORE claimed the title of Master of Pwn with a commandi
     
  • ↗️

Pwn2Own Berlin 2026: Day Three Results and Master of Pw

✇Zero Day Initiative - Blog
Por:Dustin Childs
16 de Maio de 2026, 07:38

Following two days of intense competition, Day Three of Pwn2Own Berlin 2026 brought the curtain down on an incredible event. Security researchers delivered their final exploits, pushing enterprise systems to the limit one last time as the race for Master of Pwn came to a close.

Day Three added to an already historic event, bringing the final totals to $1,298,250 awarded for 47 unique 0-day vulnerabilities across three days of competition. DEVCORE claimed the title of Master of Pwn with a commanding 50.5 points and $505,000 — a dominant performance across all three days. STARLabs SG finished in second with 25 points and $242,500, followed by Out Of Bounds in third with 12.75 points and $95,750.

Congratulations to all the researchers who participated, and a special thank you to OffensiveCon for hosting. We'll see you at the next Pwn2Own.

Here are the results of Day Three:

SUCCESS/COLLISION - Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) used two bugs to exploit Red Hat Linux, but one of the bugs was previously known. He still earns $7,000 and 1.5 Master of Pwn points.

SUCCESS - Le Tran Hai Tung (@tacbliw), dungnm (@dungnm_) and hieuvd (@gr4ss341) of Viettel Cyber Security (@vcslab) used an integer overflow to escalate privileges on #Windows 11. Their 5th round win nets them $7,500 and 3 Master of Pwn points.

SUCCESS - Satoki Tsuji (@satoki00) of Ikotas Labs, Inc. abused an external control to exploit OpenAI Codex and pop a host of calcs. He earns $20,000 and 4 Master of Pwn points.

FAILURE - Unfortunately, Giuseppe Calì of Summoning Team (@SummoningTeam) could not get their exploit of VMware ESXi working within the time allotted.

COLLISON - Although successful on stage, Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security targeted Anthropic Claude Code, hitting a one-vulnerability collision with a previous attempt and earning $20,000 and 2 Master of Pwn points.

SUCCESS - Hyunwoo Kim (@v4bel) chained a use-after-free and uninitialized memory bug to escalate privileges on Red Hat Enterprise Linux for Workstations in the fourth round, earning $5,000 and 2 Master of Pwn points.

SUCCESS - splitline (@splitline) of DEVCORE Research Team chained 2 bugs to exploit Microsoft SharePoint, earning $100,000 and 10 Master of Pwn points.

SUCCESS - Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG (@starlabs_sg) used a Memory Corruption bug to exploit VMware ESXi with the Cross-tenant Code Execution add-on, earning $200,000 and 20 Master of Pwn points.

COLLISON - While Byung Young Yi (@yibarrack) of Out Of Bounds successfully demonstrated their exploit of Anthropic Claude Code, the bug used had been previously disclosed. They still earn $20,000 and 2 Master of Pwn points.

  • ✇Zero Day Initiative - Blog
  • Pwn2Own Berlin 2026 - Day Two Results Dustin Childs
    Day Two of Pwn2Own Berlin 2026 and the stakes continue to rise! Security researchers are back on the Pwn2Own stage, pushing enterprise systems to their limits as the competition heats up. More exploits, more surprises, and more standout moments are unfolding, so follow along here for live updates as the race for Master of Pwn intensifies. There were plenty of big targets on the schedule today, including SharePoint, Exchange, and Safari.Following an action-packed Day One where $523,000 was awarde
     
  • ↗️

Pwn2Own Berlin 2026 - Day Two Results

✇Zero Day Initiative - Blog
Por:Dustin Childs
15 de Maio de 2026, 04:29

Day Two of Pwn2Own Berlin 2026 and the stakes continue to rise! Security researchers are back on the Pwn2Own stage, pushing enterprise systems to their limits as the competition heats up. More exploits, more surprises, and more standout moments are unfolding, so follow along here for live updates as the race for Master of Pwn intensifies. There were plenty of big targets on the schedule today, including SharePoint, Exchange, and Safari.

Following an action-packed Day One where $523,000 was awarded for 24 unique 0-day vulnerabilities, Day Two added another $385,750 and 15 unique 0-days, bringing event totals to $908,750 with 39 unique vulnerabilities overall. DEVCORE holds a commanding lead for Master of Pwn with 40.5 points and $405,000, but with one day still to go, anything can happen. Here are the standings as of Day Two but we'll see what the final day of the contest brings. Stay tuned!

We’ll be posting real-time updates and results throughout the competition right here on our blog and across social media. Stay up to date by following us on Twitter, Mastodon, LinkedIn, and Bluesky, and join the conversation using #Pwn2Own Berlin and #P2OBerlin for continuous coverage. 

FAILURE - Unfortunately, Tao Yan & Edouard Bochin of Palo Alto Networks could not get their exploit of Apple Safari – Renderer Only working within the time allotted.

FAILURE - Unfortunately, Stephen Fewer of Rapid7 could not get their exploit of Microsoft SharePoint working within the time allotted.

SUCCESS - Ben Koo (@kiddo_pwn) of Team DDOS used a use-after-free bug to escalate privileges on Red Hat Enterprise Linux for Workstations in the second round, earning $10,000 and 1 Master of Pwn point.

SUCCESS - Dialed in! Nikolaos Mourousias (@deltaclock), Caue Obici (@caueobici) & Bruno Halltari (@BrunoModificato) of OtterSec used a Code Injection bug to exploit LM Studio in the second round, earning $20,000 and 4 Master of Pwn points. Full win!

COLLISON - Although successful on stage, Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) targeting Claude Desktop in the Coding Agent category used a bug that was previously known. They still earn $10,000 and 2 Master of Pwn points.

SUCCESS - Le Duc Anh Vu (@vulda17) of Viettel Cyber Security (@vcslab) exploited Cursor, earning $30,000 and 3 Master of Pwn points. Full win!

WITHDRAWAL - Kiyong Kwak of Kakaogames and Song Nuri of Samsung Electronics has withdrawn their entry for Apple Safari – Renderer Only in the Web Browser category.

FAILURE - Unfortunately, Ruitong of Abstract Team, University of Colorado Boulder could not get their exploit of Red Hat Enterprise Linux for Workstations working within the time allotted.

SUCCESS - Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) exploited OpenAI Codex in the second round, earning $20,000 and 4 Master of Pwn points.

COLLISON - Although successful on stage, Billy (@st424204), Bruce Chen (@bruce30262), Pan Zhenpeng (@Peterpan980927) & Weiming Shi (@bestswngs) of STARLabs SG (@starlabs_sg) targeting NVIDIA Megatron Bridge used a bug that was previously known. They still earn $2,500 and 1 Master of Pwn point.

WITHDRAWAL - Alon Ben Tsur (@iamgweej), Yahav Azran (@_yahav) have withdrawn their entry for Red Hat Enterprise Linux for Workstations in the Local Escalation of Privilege category.

SUCCESS - Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning $200,000 and 20 Master of Pwn points.

SUCCESS / COLLISON - David Tae & Louis Hur of Out Of Bounds targeted Ollama, hitting a one-vulnerability collision with a previous attempt and earning $28,000 and 3 Master of Pwn points.

FAILURE - Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) could not get their exploit of Mozilla Firefox – Renderer Only working within the time allotted.

SUCCESS - Cyrill Bannwart, Emanuele Barbeno, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security exploited Cursor in the second round, earning $15,000 and 3 Master of Pwn points.

SUCCESS - Siyeon Wi used an integer overflow bug to escalate privileges on Microsoft Windows 11 in the fourth round, earning $7,500 and 3 Master of Pwn points.

SUCCESS / COLLISON - Byung Young Yi (@yibarrack) of Out Of Bounds targeted LiteLLM, hitting a one-vulnerability collision with a previous attempt and earning $17,750 and 3.75 Master of Pwn points.

SUCCESS - Confirmed! 0xDACA (@0xDACA) & Noam Trobishi (@NTrobishi) used a use-after-free bug to exploit NV Container Toolkit in the second round, earning $25,000 and 5 Master of Pwn points.

  • ✇Zero Day Initiative - Blog
  • Pwn2Own Berlin 2026 - Day One Results Dustin Childs
    Welcome to Day One of Pwn2Own Berlin 2026! Today, 22 entries took the Pwn2Own stage to target AI Databases, Coding Agents, Local Inferences, and a separate category for NVIDIA products, as the world’s top security researchers push technology to its limits. Exploits, surprises, and breakthrough discoveries are unfolding.After Day One, we awarded $523,000 for 24 unique 0-days! DEVCORE is currently in the lead for Master of Pwn, but a pack of teams are right on their heels. Stay tuned tomorrow for
     
  • ↗️

Pwn2Own Berlin 2026 - Day One Results

✇Zero Day Initiative - Blog
Por:Dustin Childs
14 de Maio de 2026, 05:27

Welcome to Day One of Pwn2Own Berlin 2026! Today, 22 entries took the Pwn2Own stage to target AI Databases, Coding Agents, Local Inferences, and a separate category for NVIDIA products, as the world’s top security researchers push technology to its limits. Exploits, surprises, and breakthrough discoveries are unfolding.

After Day One, we awarded $523,000 for 24 unique 0-days! DEVCORE is currently in the lead for Master of Pwn, but a pack of teams are right on their heels. Stay tuned tomorrow for more results and surprises.

Follow the action live! We’ll be posting real-time updates and results throughout the competition on our blog and across social media. Stay up to date by following us on Twitter, Mastodon, LinkedIn, and Bluesky, and join the conversation using #Pwn2Own Berlin and #P2OBerlin for continuous coverage. 

FAILURE - Unfortunately, Le Duc Anh Vu (@vulda17) of Viettel Cyber Security (@vcslab) could not get their exploit of OpenAI Codex working within the time allotted.

SUCCESS - Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points.

SUCCESS - chompie of IBM X-Force Offensive Research (XOR) used a single bug to exploit NV Container Toolkit, earning $50,000 and 5 Master of Pwn points.

SUCCESS - k3vg3n chained 3 bugs including SSRF and Code Injection to take down LiteLLM. $40,000 and 4 Master of Pwn points. Full win.

SUCCESS - Satoki Tsuji (@satoki00) of Ikotas Labs, Inc. used an Overly Permissive Allowed List bug to exploit NVIDIA Megatron Bridge, earning $20,000 and 2 Master of Pwn points.

FAILURE - Unfortunately, Park Jae Min could not get their exploit of Oracle Autonomous AI Database working within the time allotted. #Pwn2Own #P2OBerlin

SUCCESS - Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller of Compass Security (@compasssecurity) used a single CWE-150 bug to exploit OpenAI Codex, earning $40,000 and 4 Master of Pwn points.

SUCCESS - Angelboy (@scwuaptx) & TwinkleStar03 (@_twinklestar03) of DEVCORE Research Team used an Improper Access Control bug to escalate privileges on Microsoft Windows 11, earning $30,000 and 3 Master of Pwn points.

WITHDRAWAL - Ben Koo (@kiddo_pwn) of Team DDOS has withdrawn their entry for Mozilla Firefox – Renderer Only in the Web Browser category

FAILURE - Unfortunately, Interrupt Labs could not get their exploit of NV Container Toolkit working within the time allotted

COLLISON - Although successful on stage, the Ikotas Labs, Inc. team targeting LiteLLM in the Local Inference category used bugs that were previously known. They still earn $8,000 and 1.75 Master of Pwn points.

SUCCESS - Yoseop Kim (@pwning_me) used a CWE-470 bug to exploit NVIDIA Megatron Bridge in the second round, earning $10,000 and 2 Master of Pwn points.

COLLISON - Although successful on stage, maitai (@MaitaiThe) of Doyensec (@Doyensec) targeting OpenAI Codex in the Coding Agent category used a bug that was previously known to the vendor. They still earn $10,000 and 2 Master of Pwn points.

WITHDRAWAL - Yoseop Kim(@pwning_me) has withdrawn their entry for Mozilla Firefox – Renderer Only in the Web Browser category

SUCCESS - haehae (@haehaeYang) of Out Of Bounds chained 2 bugs (CWE-190, CWE-362) to exploit Chroma, earning $20,000 and 2 Master of Pwn points.

SUCCESS - Billy (@st424204), Pan Zhenpeng (@Peterpan980927) & Weiming Shi (@bestswngs) of STARLabs SG (@starlabs_sg) chained 5 bugs (incl. SSRF and Code Injection) to exploit LM Studio, earning $40,000 and 4 Master of Pwn points. Full win!

SUCCESS - Marcin Wiązowski used a heap-based buffer overflow to escalate privileges on Microsoft Windows 11 in the second round, earning $15,000 and 3 Master of Pwn points.

WITHDRAWAL - Qrious Secure (@qriousec) has withdrawn their entry for LM Studio in the Local Inference category.

SUCCESS - Chompie of IBM X-Force Offensive Research (XOR) used a race condition to escalate privileges on Red Hat Enterprise Linux for Workstations, earning $20,000 and 2 Master of Pwn points.

COLLISON - Although successful on stage, Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) targeting Anthropic Claude Code in the Coding Agent category used a bug that was previously known to the vendor. They still earn $20,000 and 2 Master of Pwn points

SUCCESS - haehae (@haehaeYang) of Out Of Bounds used a Path Traversal bug to exploit NVIDIA Megatron Bridge in the second round, earning $10,000 and 2 Master of Pwn points. Full win!

SUCCESS - Kentaro Kawane of GMO Cybersecurity by Ierae chained 2 Use-After-Free bugs to escalate privileges on Microsoft Windows 11 in the third round, earning $15,000 and 3 Master of Pwn points.

  • ✇Zero Day Initiative - Blog
  • Pwn2Own Berlin 2026: The Full Schedule Dustin Childs
    Willkommen! (Welcome!) Pwn2Own Berlin 2026 has arrived at OffensiveCon, and the world’s top security researchers are ready. This year’s enterprise-focused competition features AI Databases, Coding Agents, Local Inferences, and a separate category for NVIDIA products.Earlier today, we held the random draw to determine attempt order. Below is the official schedule. All times are Berlin local time (CET) and may change as the competition progresses. Check back for live updates.In case you missed it,
     
  • ↗️

Pwn2Own Berlin 2026: The Full Schedule

✇Zero Day Initiative - Blog
Por:Dustin Childs
13 de Maio de 2026, 13:23

Willkommen! (Welcome!) Pwn2Own Berlin 2026 has arrived at OffensiveCon, and the world’s top security researchers are ready. This year’s enterprise-focused competition features AI Databases, Coding Agents, Local Inferences, and a separate category for NVIDIA products.

Earlier today, we held the random draw to determine attempt order. Below is the official schedule. All times are Berlin local time (CET) and may change as the competition progresses. Check back for live updates.

In case you missed it, you can watch the draw here.

Jump to:

Day One

Day Two

Day Three

DAY ONE

Thursday, May 14 - 1030

chompie of IBM X-Force Offensive Research (XOR) targeting NV Container Toolkit in the NVIDIA category for a total of $50,000 and 5 Master of Pwn points

Le Duc Anh Vu ( @vulda ) of Viettel Cyber Security (@vcslab) targeting OpenAI Codex in the Coding Agent category for a total of $40,000 and 4 Master of Pwn points

Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) targeting Microsoft Edge – Sandbox Escape in the Web Browser category for a total of $175,000 and 17.5 Master of Pwn points

Thursday, May 14 - 1130

k3vg3n targeting LiteLLM in the Local Inference category for a total of $40,000 and 4 Master of Pwn points

Satoki Tsuji (@satoki00) / Ikotas Labs, Inc. targeting Megatron Bridge in the NVIDIA category for a total of $20,000 and 2 Master of Pwn points

Thursday, May 14 - 1300

Angelboy (@scwuaptx) of DEVCORE Research Team and TwinkleStar03 (@_twinklestar03), working with DEVCORE Internship Program targeting Microsoft Windows 11 in the Local Escalation of Privilege category for a total of $30,000 and 3 Master of Pwn points

Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller of Compass Security (@compasssecurity) targeting OpenAI Codex in the Coding Agent category for a total of $40,000 and 4 Master of Pwn points

Park Jae Min (@hiariz) targeting Oracle Autonomous AI Database in the AI Database category for a total of $40,000 and 4 Master of Pwn points

Thursday, May 14 - 1400

Satoki Tsuji (@satoki00) / Ikotas Labs, Inc. targeting LiteLLM in the Local Inference category for a total of $40,000 and 4 Master of Pwn points.

Yoseop kim(@pwning_me) targeting Megatron Bridge in the NVIDIA category for a total of $20,000 and 2 Master of Pwn points

Thursday, May 14 - 1500

Ben Koo (@kiddo_pwn) of Team DDOS targeting Mozilla Firefox – Renderer Only in the Web Browser category for a total of $50,000 and 5 Master of Pwn points

Interrupt Labs targeting NV Container Toolkit in the NVIDIA category for a total of $50,000 and 5 Master of Pwn points

Thursday, May 14 - 1530

maitai (@MaitaiThe) of Doyensec (@Doyensec) targeting OpenAI Codex in the Coding Agent category for a total of $40,000 and 4 Master of Pwn points

Thursday, May 14 - 1600

Billy (@st424204), Pan Zhenpeng(@Peterpan980927), Weiming Shi (@bestswngs) of STARLabs SG (@starlabs_sg) targeting LM Studio in the Local Inference category for a total of $40,000 and 4 Master of Pwn points

Marcin Wiązowski targeting Microsoft Windows 11 in the Local Escalation of Privilege category for a total of $30,000 and 3 Master of Pwn points

Thursday, May 14 - 1630

haehae (@haehaeYang) of Out Of Bounds targeting Chroma in the AI Database category for a total of $20,000 and 2 Master of Pwn points

Thursday, May 14 - 1730

chompie of IBM X-Force Offensive Research (XOR) targeting Red Hat Enterprise Linux for Workstations in the Local Escalation of Privilege category for a total of $20,000 and 2 Master of Pwn points

Yoseop Kim(@pwning_me) targeting Mozilla Firefox – Renderer Only in the Web Browser category for a total of $50,000 and 5 Master of Pwn points

Thursday, May 14 - 1800

@rewhiles of Viettel Cyber Security (@vcslab) targeting Anthropic Claude Code in the Coding Agent category for a total of $40,000 and 4 Master of Pwn points

Thursday, May 14 - 1830

Kentaro Kawane of GMO Cybersecurity by Ierae targeting Microsoft Windows 11 in the Local Escalation of Privilege category for a total of $30,000 and 3 Master of Pwn points

Qrious Secure (@qriousec) targeting LM Studio in the Local Inference category for a total of $40,000 and 4 Master of Pwn points

Thursday, May 14 - 1900

haehae (@haehaeYang) of Out of Bounds targeting Megatron Bridge in the NVIDIA category for a total of $20,000 and 2 Master of Pwn points

Back to top

DAY TWO

Friday, May 15 - 1030

Ben Koo (@kiddo_pwn) of Team DDOS targeting Red Hat Enterprise Linux for Workstations in the Local Escalation of Privilege category for a total of $20,000 and 2 Master of Pwn points

Stephen Fewer (Rapid7) targeting Microsoft SharePoint in the Server category for a total of $100,000 and 10 Master of Pwn points

Tao Yan (@Ga1ois) and Edouard Bochin (@le_douds) from Palo Alto Networks targeting Apple Safari – Renderer Only in the Web Browser category for a total of $75,000 and 7.5 Master of Pwn points

Friday, May 15 - 1130

Le Duc Anh Vu ( @vulda ) of Viettel Cyber Security (@vcslab) targeting Cursor in the Coding Agent category for a total of $30,000 and 3 Master of Pwn points

Nikolaos Mourousias (@deltaclock), Caue Obici (@caueobici) and Bruno Halltari (@BrunoModificato) of OtterSec targeting LM Studio in the Local Inference category for a total of $40,000 and 4 Master of Pwn points

Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam). targeting Anthropic Claude Code in the Coding Agent category for a total of $40,000 and 4 Master of Pwn points

Friday, May 15 - 1300

Ruitong from the Abstract Team at the University of Colorado Boulder targeting Red Hat Enterprise Linux for Workstations in the Local Escalation of Privilege category for a total of $20,000 and 2 Master of Pwn points

Friday, May 15 - 1330

Kiyong Kwak of Kakaogames and Song Nuri of Samsung Electronics targeting Apple Safari – Renderer Only in the Web Browser category for a total of $75,000 and 7.5 Master of Pwn points

Orange Tsai (@orange_8361) of DEVCORE Research Team targeting Microsoft Exchange in the Server category for a total of $200,000 and 20 Master of Pwn points

Friday, May 15 - 1400

Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam). targeting OpenAI Codex in the Coding Agent category for a total of $40,000 and 4 Master of Pwn points

Friday, May 15 - 1430

Billy (@st424204), Bruce Chen(@bruce30262), Pan Zhenpeng(@Peterpan980927), Weiming Shi (@bestswngs ) of STARLabs SG (@starlabs_sg) targeting Megatron Bridge in the NVIDIA category for a total of $20,000 and 2 Master of Pwn points

David Tae, Louis Hur of Out Of Bounds targeting Ollama in the Local Inference category for a total of $40,000 and 4 Master of Pwn points

Friday, May 15 - 1530

Team: Alon Ben Tsur (@iamgweej), Yahav Azran (@_yahav) targeting Red Hat Enterprise Linux for Workstations in the Local Escalation of Privilege category for a total of $20,000 and 2 Master of Pwn points

Friday, May 15 - 1600

@rewhiles of Viettel Cyber Security (@vcslab) targeting Mozilla Firefox – Renderer Only in the Web Browser category for a total of $50,000 and 5 Master of Pwn points

Siyeon Wi targeting Microsoft Windows 11 in the Local Escalation of Privilege category for a total of $30,000 and 3 Master of Pwn points

Friday, May 15 - 1630

Byung Young Yi (@yibarrack) of Out Of Bounds targeting LiteLLM in the Local Inference category for a total of $40,000 and 4 Master of Pwn points

Friday, May 15 - 1700

Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller of Compass Security (@compasssecurity) targeting Cursor in the Coding Agent category for a total of $30,000 and 3 Master of Pwn points

Friday, May 15 - 1800

Daniel Cohen Hillel (@0xDACA) targeting NV Container Toolkit in the NVIDIA category for a total of $50,000 and 5 Master of Pwn points

Back to top

DAY THREE

Saturday, May 16 - 1100

Le Tran Hai Tung (@tacbliw), dungnm (@dungnm_) and hieuvd (@gr4ss341) of Viettel Cyber Security (@vcslab) targeting Microsoft Windows 11 in the Local Escalation of Privilege category for a total of $30,000 and 3 Master of Pwn points

Satoki Tsuji (@satoki00) / Ikotas Labs, Inc. targeting OpenAI Codex in the Coding Agent category for a total of $40,000 and 4 Master of Pwn points

Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam). targeting Red Hat Enterprise Linux for Workstations in the Local Escalation of Privilege category for a total of $20,000 and 2 Master of Pwn points

Saturday, May 16 - 1330

Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller of Compass Security (@compasssecurity) targeting Anthropic Claude Code in the Coding Agent category for a total of $40,000 and 4 Master of Pwn points

Hyunwoo Kim (@v4bel) targeting Red Hat Enterprise Linux for Workstations in the Local Escalation of Privilege category for a total of $20,000 and 2 Master of Pwn points

Team: Giuseppe Calì (@_gcali) of Summoning Team targeting VMware ESXi in the Virtualization category with the Cross-tenant Code Execution Addon add-on for a total of $200,000 and 20 Master of Pwn points

Saturday, May 16 - 1430

splitline (@_splitline_) of DEVCORE Research Team targeting Microsoft SharePoint in the Server category for a total of $100,000 and 10 Master of Pwn points

Saturday, May 16 - 1600

Byung Young Yi (@yibarrack) of Out Of Bounds targeting Anthropic Claude Code in the Coding Agent category for a total of $40,000 and 4 Master of Pwn points

Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG (@starlabs_sg) targeting VMware ESXi in the Virtualization category with the Cross-tenant Code Execution Addon add-on for a total of $200,000 and 20 Master of Pwn points

Follow the action live! We’ll be posting real-time updates and results throughout the competition on our blog and across social media. Stay up to date by following us on Twitter, Mastodon, LinkedIn, and Bluesky, and join the conversation using #Pwn2Own Berlin and #P2OBerlin for continuous coverage. 

  • ✇Zero Day Initiative - Blog
  • The May 2026 Security Update Review Dustin Childs
    I’m currently in Berlin helping set up for Pwn2Own Berlin, but that doesn’t stop Patch Tuesday from coming, and it’s another big one. At least nothing is listed as being in the wild – for now. Take a break from your regularly scheduled activities and let’s take a look at the latest security patches from Adobe and Microsoft. Due to technical difficulties, there will not be a video companion for this month.Adobe Patches for May 2026For May, Adobe released 10 bulletins addressing 52 unique CVEs in
     
  • ↗️

The May 2026 Security Update Review

✇Zero Day Initiative - Blog
Por:Dustin Childs
12 de Maio de 2026, 15:38

I’m currently in Berlin helping set up for Pwn2Own Berlin, but that doesn’t stop Patch Tuesday from coming, and it’s another big one. At least nothing is listed as being in the wild – for now. Take a break from your regularly scheduled activities and let’s take a look at the latest security patches from Adobe and Microsoft. Due to technical difficulties, there will not be a video companion for this month.

Adobe Patches for May 2026

For May, Adobe released 10 bulletins addressing 52 unique CVEs in Adobe Commerce, After Effects, Adobe Connect, Illustrator, Media Encoder, Premiere Pro, Substance 3D Painter, Substance 3D Sampler, Content Authenticity SDK, and the Adobe Substance 3D Designer. Here’s this month’s overview table:

Bulletin ID Product CVE Count Highest Severity Highest CVSS Exploited Deployment Priority
APSB26-49 Adobe Commerce 15 Critical 8.7 No 2
APSB26-48 Adobe After Effects 4 Critical 7.8 No 3
APSB26-50 Adobe Connect 2 Critical 9.6 No 3
APSB26-51 Adobe Illustrator 4 Critical 7.8 No 3
APSB26-47 Adobe Media Encoder 2 Critical 7.8 No 3
APSB26-46 Adobe Premiere Pro 3 Critical 7.8 No 3
APSB26-55 Adobe Substance 3D Painter 2 Critical 7.8 No 3
APSB26-54 Adobe Substance 3D Sampler 1 Critical 7.8 No 3
APSB26-53 Content Authenticity SDK 14 Critical 7.5 No 3
APSB26-52 Adobe Substance 3D Designer 5 Important 6.3 No 3
TOTAL 10 bulletins 52

The obvious priority this month is the patch for Commerce, with its 15 bugs and deployment priority of 2. The Connect fix should also rank up there since both of its CVEs are CVSS 9s. Beyond those, it’s a pretty typical month for Adobe, with most of the bugs either being cross-site scripting (XSS) or open-and-own code executions.

Microsoft Patches for May 2026

This month, Microsoft released a whopping 138 new CVEs in Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Copilot Chat, Github Copilot, M365 Copilot, SQL Server, TCP/IP, and the Telnet Client – yes, the Telnet client. Two of these bugs were reported through the TrendAI ZDI program. 30 of these bugs are rated Critical, three are rated as Moderate, one is rated Low, and the rest are rated Important in severity.

This large volume of fixes follows the largest monthly release in Microsoft’s history and reflects the trend across the industry of a high number of submissions. While not all of these bugs were found by AI, it’s likely they had an AI-related component – even if it was just AI writing the submission. I should also point out the Pwn2Own Berlin occurs in just a few days, and it’s typical for vendors to patch as much as they can before the event.

None of the bugs patched by Microsoft this month are listed as publicly known or under active attack at the time of release, so we’ve got that going for us. Let’s take a closer look at some of the more interesting updates for this month, starting with a nasty-looking bug in DNS:

-    CVE-2026-41096 - Windows DNS Client Remote Code Execution Vulnerability
This patch fixes a heap-based buffer overflow in the DNS Client triggered by a malicious DNS response. No authentication or user interaction needed, and since the DNS Client runs on virtually every Windows machine, the attack surface is enormous. An attacker with a position to influence DNS responses (MitM, rogue server) could achieve unauthenticated RCE across your enterprise.

-    CVE-2026-41089 - Windows Netlogon Remote Code Execution Vulnerability
This update covers another CVSS 9.8 bug, which is a stack-based buffer overflow that lets an unauthenticated remote attacker execute code on a domain controller by sending a specially crafted network request — no credentials, no user interaction required. Yup – that makes it wormable. This is the highest-impact bug that requires immediate patching: a compromised domain controller is a compromised domain.

-    CVE-2026-42898 - Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
This bug rates a CVSS 9.9(!) and represents a code injection in Dynamics 365. It allows any authenticated user to execute code with a scope change, meaning exploitation can break out and affect resources beyond the vulnerable component itself. Scope changes are pretty rare, so if you’re running Dynamics 365 On-Prem, definitely test and deploy this patch quickly.

-    CVE-2026-40415 - Windows TCP/IP Remote Code Execution Vulnerability
This bug in the TCP/IP stack results from a use-after-free (UAF) and could allow a remote, unauthenticated threat actor to execute code without user interaction. That makes this another wormable bug. However, this one is much less likely to be exploited. The target needs to be under sustained low-memory (memory pressure) conditions, which is pretty rare. Still, no need to tempt fate here. Test and deploy this one quickly.

Here’s the full list of CVEs released by Microsoft for May 2026:

CVE Title Severity CVSS Public Exploited Type
CVE-2026-35435 Azure AI Foundry Elevation of Privilege Vulnerability Critical 8.6 No No EoP
CVE-2026-35428 Azure Cloud Shell Spoofing Vulnerability Critical 9.6 No No Spoofing
CVE-2026-42826 Azure DevOps Information Disclosure Vulnerability Critical 10 No No Info
CVE-2026-32207 Azure Machine Learning Notebook Spoofing Vulnerability Critical 8.8 No No Spoofing
CVE-2026-33109 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability Critical 9.9 No No RCE
CVE-2026-33844 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability Critical 9 No No RCE
CVE-2026-41105 Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability Critical 8.1 No No EoP
CVE-2026-33111 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability Critical 7.5 No No Info
CVE-2026-26129 M365 Copilot Information Disclosure Vulnerability Critical 7.5 No No Info
CVE-2026-26164 M365 Copilot Information Disclosure Vulnerability Critical 7.5 No No Info
CVE-2026-33821 Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability Critical 7.7 No No EoP
CVE-2026-42898 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Critical 9.9 No No RCE
CVE-2026-40379 Microsoft Enterprise Security Token Service (ESTS) Spoofing Vulnerability Critical 9.3 No No Spoofing
CVE-2026-40363 Microsoft Office Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-40358 Microsoft Office Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-34327 Microsoft Partner Center Spoofing Vulnerability Critical 8.2 No No Spoofing
CVE-2026-40365 Microsoft SharePoint Server Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability Critical 9.1 No No EoP
CVE-2026-33823 Microsoft Team Events Portal Information Disclosure Vulnerability Critical 9.6 No No Info
CVE-2026-40364 Microsoft Word Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-40366 Microsoft Word Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-40361 Microsoft Word Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-40367 Microsoft Word Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-42831 Office for Android Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-41096 Windows DNS Client Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-35421 Windows GDI Remote Code Execution Vulnerability Critical 7.8 No No RCE
CVE-2026-40403 Windows Graphics Component Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-40402 Windows Hyper-V Elevation of Privilege Vulnerability Critical 9.3 No No EoP
CVE-2026-32161 Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability Critical 7.5 No No RCE
CVE-2026-41089 Windows Netlogon Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-32175 .NET Core Tampering Vulnerability Important 4.3 No No Tampering
CVE-2026-32177 .NET Elevation of Privilege Vulnerability Important 7.3 No No EoP
CVE-2026-35433 .NET Elevation of Privilege Vulnerability Important 7.3 No No EoP
CVE-2025-54518 * AMD: CVE-2025-54518 CPU OP Cache Corruption Important No No RCE
CVE-2026-42899 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-40381 Azure Connected Machine Agent Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-42823 † Azure Logic Apps Elevation of Privilege Vulnerability Important 9.9 No No EoP
CVE-2026-33833 Azure Machine Learning Notebook Spoofing Vulnerability Important 8.2 No No Spoofing
CVE-2026-32204 Azure Monitor Agent Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-42830 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability Important 6.5 No No EoP
CVE-2026-33117 Azure SDK for Java Security Feature Bypass Vulnerability Important 9.1 No No SFB
CVE-2026-41109 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability Important 8.8 No No SFB
CVE-2026-35424 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-41614 M365 Copilot for Desktop Spoofing Vulnerability Important 6.2 No No Spoofing
CVE-2026-41100 Microsoft 365 Copilot for Android Spoofing Vulnerability Important 4.4 No No Spoofing
CVE-2026-40377 Microsoft Cryptographic Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-41094 Microsoft Data Formulator Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-40417 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-42833 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Important 9.1 No No RCE
CVE-2026-42838 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Important 5.4 No No EoP
CVE-2026-40360 Microsoft Excel Information Disclosure Vulnerability Important 7.8 No No Info
CVE-2026-40359 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-40362 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-42832 Microsoft Excel Spoofing Vulnerability Important 7.7 No No Spoofing
CVE-2026-34329 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-40419 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-40418 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-35436 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-40420 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-42893 Microsoft Outlook for iOS Tampering Vulnerability Important 7.4 No No Tampering
CVE-2026-40374 Microsoft Power Automate Desktop Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-41102 Microsoft PowerPoint for Android Spoofing Vulnerability Important 7.1 No No Spoofing
CVE-2026-35439 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-40368 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-33110 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-33112 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-40357 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-32185 Microsoft Teams Spoofing Vulnerability Important 5.5 No No Spoofing
CVE-2026-41101 Microsoft Word for Android Spoofing Vulnerability Important 7.1 No No Spoofing
CVE-2026-35440 Microsoft Word Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-40421 Microsoft Word Information Disclosure Vulnerability Important 4.3 No No Info
CVE-2026-41097 Secure Boot Security Feature Bypass Vulnerability Important 6.7 No No SFB
CVE-2026-40370 † SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-41613 Visual Studio Code Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-41612 Visual Studio Code Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-41611 Visual Studio Code Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-41610 Visual Studio Code Security Feature Bypass Vulnerability Important 6.3 No No SFB
CVE-2026-33839 Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-33840 Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34330 Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34331 Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-35423 Windows 11 Telnet Client Information Disclosure Vulnerability Important 5.4 No No Info
CVE-2026-35438 Windows Admin Center Elevation of Privilege Vulnerability Important 8.3 No No EoP
CVE-2026-41086 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-34344 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34345 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-35416 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-41088 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34343 Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-35418 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-33835 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34337 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-40407 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-40397 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-42896 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-35419 Windows DWM Core Library Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-34336 Windows DWM Core Library Information Disclosure Vulnerability Important 7.8 No No Info
CVE-2026-33834 Windows Event Logging Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32209 Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability Important 4.4 No No SFB
CVE-2026-33841 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-35420 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-40369 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34332 Windows Kernel-Mode Driver Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-34339 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Important 5.5 No No DoS
CVE-2026-34341 Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-33838 Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34342 Windows Print Spooler Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-41095 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34340 Windows Projected File System Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-40398 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-21530 Windows Rich Text Edit Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-32170 Windows Rich Text Edit Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-40410 Windows SMB Client Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-35415 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34350 Windows Storport Miniport Driver Denial of Service Vulnerability Important 6.5 No No DoS
CVE-2026-40405 Windows TCP/IP Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-40414 Windows TCP/IP Denial of Service Vulnerability Important 7.4 No No DoS
CVE-2026-40401 Windows TCP/IP Denial of Service Vulnerability Important 6.2 No No DoS
CVE-2026-40413 Windows TCP/IP Denial of Service Vulnerability Important 7.4 No No DoS
CVE-2026-35422 Windows TCP/IP Driver Security Feature Bypass Vulnerability Important 6.5 No No SFB
CVE-2026-34351 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-40399 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34334 Windows TCP/IP Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-40406 Windows TCP/IP Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-33837 Windows TCP/IP Local Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-40415 Windows TCP/IP Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-42825 Windows Telephony Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-34338 Windows Telephony Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-40382 Windows Telephony Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-40380 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Important 6.2 No No RCE
CVE-2026-40408 Windows WAN ARP Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34333 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-34347 Windows Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-35417 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-42891 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability Moderate 6.5 No No Spoofing
CVE-2026-35429 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability Moderate 4.3 No No Spoofing
CVE-2026-41107 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Moderate 7.4 No No Info
CVE-2026-40416 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability Low 4.3 No No Spoofing

* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.

† Indicates further administrative actions are required to fully address the vulnerability.

 

Looking at the other Critical-rated bugs in this month’s release, there are quite a few scary-looking bugs (including a CVSS 10!), but there’s no action for the end user as Microsoft has already mitigated these bugs and is just now documenting them. There’s also this month’s crop of Office bugs where the Preview Pane is an attack vector. However, the bug in Office for Android does not have the Preview Pane vector; it’s simple open and own. The bug in the WiFi driver needs a network adjacent attacker. The SharePoint bug requires authentication, but anyone with site privileges has the authentication needed. The bug in SSO Plugin for Jira & Confluence should really be called an authentication bypass, since it allows an unauthenticated attacker to gain access to a system.

Looking at the other code execution bugs, most are of the open and own variety as expected. The bug in Dynamic 365 (On Prem) requires high privileges. The Message Queueing bug requires an adjacent attacker. The bug in SQL Server requires authentication, but as usual, patching won’t be straightforward. Finally, there’s a bug in the kernel that leads to code execution. Most kernel bugs are privilege escalations, but this one could allow code execution if an attacker sends specially crafted NVMe over Fabrics (NVMe‑oF) response messages during the connection handshake process that contains an invalid header length value. Neat.

As usual, the vast majority of the Microsoft release fixes Elevation of Privilege (EoP) bugs. Also as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there’s not much to add without further technical details about the bugs themselves. There are also a few bugs that just state the attacker could “gain ELEVATED privileges.” How obtuse. The bugs in Azure allow an attacker to access data otherwise hidden from them. The Edge bug allows threat actors to elevate to the privileges of the running application. The bug in Visual Studio allows attackers to get permissions associated with the MCP Server’s managed identity. Finally, there are a couple of sandbox escapes, too, which are always useful.

This month's update includes six Security Feature Bypass vulnerabilities. The most severe is in the Azure SDK for Java (CVSS 9.1). An attacker over the network can bypass the integrity protection provided by authentication tags on encrypted data, effectively manipulating encrypted input in a way that slips past integrity checks during decryption. Close behind is the bypass affecting the GitHub Copilot integration in Visual Studio Code (CWE-74). This one requires a user interaction, but it allows an attacker to circumvent the path validation safeguards that normally control which files Copilot is permitted to modify. The other Visual Studio Code bypass involves cross-site scripting, improper link resolution, and information exposure triggered when a user opens or views a maliciously crafted notebook. On the Windows networking side there are two bypasses. The first hits the Windows TCP/IP driver via an authentication bypass using an alternate channel. The other impacts the Windows Filtering Platform through improper access control, allowing a local, low-privileged attacker to bypass FQDN-based network security rules. Finally, there’s a Secure Boot bypass that, you guessed it, bypasses secure boot features.

Moving on to the Information Disclosure bugs fixed this month, we have 15 different CVEs. As usual, the majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. The bug in Power Automate could expose data marked “Sensitive” within Power Automate Desktop flows. One of the Word bugs could disclose NLTM hashes. The bug in Edge could disclose your cookies, which seems rude. The bug in Visual Studio could expose file path information. Finally, there’s a bug in Telnet for Windows 11 that leaks information being used by Telnet at the time. I didn’t even realize Windows 11 still had a telnet client.

The May release contains 10 spoofing bugs (plus the ones already addressed by Microsoft). The bug in Azure Machine Learning Notebooks vulnerability requires user interaction, but it could expose info through the Azure ML web interface to the attacker. There’s a cluster of fixes for Microsoft's mobile Office suite on Android. Excel, Word, and PowerPoint for Android all carry spoofing flaws rooted in improper access control. Two Copilot products are also affected by spoofing vulns. The M365 Copilot for Desktop has no details provided. The M365 Copilot for Android variant requires low privileges and producing only limited impact on confidentiality and integrity. Microsoft Teams for Android rounds out the mobile app spoofing bugs. Three Edge bugs close things out, all involving misrepresentation of information in the browser UI.

There are two Tampering bugs in this month’s release. The one in .NET Core allows threat actors to write files to an affected system. The other is in Outlook for iOS and manifests as a command injection bug.

There are eight DoS bugs in the May release, but as always, Microsoft provides little to no actionable information about the vulnerabilities. The most interesting from a practical standpoint are two TCP/IP bugs that allow a low-privilege Hyper-V guest to crash the host. Both are triggered from the adjacent network. On the broader network-exposure side, the ASP.NET Core bug is a straightforward infinite loop condition — an unauthenticated attacker sends a crafted request over the network and the server stops responding.

No new advisories are being released this month.

Looking Ahead

Assuming I survive Pwn2Own Berlin (which is looking iffy at the moment), I’ll return on June 9th on what will hopefully be a smaller release than this one. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

  • ✇Zero Day Initiative - Blog
  • The Apple macOS Security Update Review Dustin Childs
    We’ve received some feedback from those who read the Patch Blog that they would like something similar for macOS updates. Unfortunately, Apple doesn’t schedule these for a particular day, but we can provide our thoughts and analysis on the days they do release their latest patches. For May 2026, Apple released 82 unique CVEs across the three macOS versions: 79 for macOS Tahoe 26.5, 45 for macOS Sequoia 15.7.7, and 42 for macOS Sonoma 14.8.7. Since Apple doesn’t provide CVSS scores or other sever
     
  • ↗️

The Apple macOS Security Update Review

✇Zero Day Initiative - Blog
Por:Dustin Childs
12 de Maio de 2026, 09:21

We’ve received some feedback from those who read the Patch Blog that they would like something similar for macOS updates. Unfortunately, Apple doesn’t schedule these for a particular day, but we can provide our thoughts and analysis on the days they do release their latest patches.

For May 2026, Apple released 82 unique CVEs across the three macOS versions: 79 for macOS Tahoe 26.5, 45 for macOS Sequoia 15.7.7, and 42 for macOS Sonoma 14.8.7. Since Apple doesn’t provide CVSS scores or other severity information, we’re left to speculate on which of these bugs is the most severe. However, there are a couple that stand out.

-              CVE-2026-28819 (Wi-Fi) stands out as the strongest candidate for the most severe as it states, “An app may be able to execute arbitrary code with kernel privileges.” The combination of arbitrary code execution at the kernel level is about as bad as it gets on a severity scale. Plus, it affects all three macOS versions (Tahoe, Sequoia, and Sonoma).

-              CVE-2026-43668 (mDNSResponder) also piques my interest since, “A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.” The remote attack vector with kernel memory corruption on all three OS versions makes this a serious one, especially since mDNSResponder is always running.

-              CVE-2026-28972 (Kernel) This one states that “An app may be able to cause unexpected system termination or write kernel memory.” An out-of-bounds write directly into kernel memory on all three OS versions. This one may also have implications in the upcoming Pwn2Own Berlin contest.

Here’s a look at all the bugs released by Apple this month:

82Unique CVEs 79macOS Tahoe 26.5 45macOS Sequoia 15.7.7 42macOS Sonoma 14.8.7
CVE ID Component Impact macOS Tahoe 26.5 macOS Sequoia 15.7.7 macOS Sonoma 14.8.7
CVE-2026-28991 Accelerate An app may be able to cause a denial-of-service Yes No No
CVE-2026-28988 Accounts An app may be able to bypass certain Privacy preferences Yes No No
CVE-2026-28959 APFS An app may be able to cause unexpected system termination Yes Yes Yes
CVE-2026-28995 App Intents A malicious app may be able to break out of its sandbox Yes No No
CVE-2026-1837 AppleJPEG Processing a maliciously crafted image may lead to a denial-of-service Yes No No
CVE-2026-28956 AppleJPEG Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory Yes Yes Yes
CVE-2026-39869 Audio Processing an audio stream in a maliciously crafted media file may terminate the process Yes Yes Yes
CVE-2026-28922 CoreMedia An app may be able to access private information Yes Yes Yes
CVE-2026-28936 CoreServices Processing a maliciously crafted file may lead to unexpected app termination Yes No Yes
CVE-2026-28918 CoreSymbolication Parsing a maliciously crafted file may lead to an unexpected app termination Yes No No
CVE-2026-28878 Crash Reporter An app may be able to enumerate a user's installed apps No Yes No
CVE-2026-28915 CUPS An app may be able to gain root privileges Yes Yes Yes
CVE-2026-43659 FileProvider An app may be able to access sensitive user data Yes Yes Yes
CVE-2026-28923 GPU Drivers A malicious app may be able to break out of its sandbox Yes Yes Yes
CVE-2026-28925 HFS An app may be able to cause unexpected system termination or write kernel memory Yes Yes Yes
CVE-2025-43524 Icons An app may be able to break out of its sandbox No Yes Yes
CVE-2026-43661 ImageIO Processing a maliciously crafted image may corrupt process memory Yes No No
CVE-2026-28977 ImageIO Processing a maliciously crafted file may lead to unexpected app termination Yes Yes Yes
CVE-2026-28990 ImageIO Processing a maliciously crafted image may corrupt process memory Yes Yes Yes
CVE-2026-28978 Installer A malicious app may be able to break out of its sandbox Yes Yes Yes
CVE-2026-28992 IOHIDFamily An attacker may be able to cause unexpected app termination Yes Yes Yes
CVE-2026-28943 IOHIDFamily An app may be able to determine kernel memory layout Yes Yes Yes
CVE-2026-28969 IOKit An app may be able to cause unexpected system termination Yes Yes Yes
CVE-2026-43655 IOSurfaceAccelerator An app may be able to cause unexpected system termination or read kernel memory Yes No No
CVE-2026-43654 Kernel An app may be able to disclose kernel memory Yes Yes Yes
CVE-2026-28908 Kernel An app may be able to modify protected parts of the file system Yes Yes Yes
CVE-2026-28954 Kernel A maliciously crafted disk image may bypass Gatekeeper checks Yes Yes Yes
CVE-2026-28897 Kernel A local user may be able to cause unexpected system termination or read kernel memory Yes Yes Yes
CVE-2026-28952 Kernel An app may be able to cause unexpected system termination Yes Yes Yes
CVE-2026-28951 Kernel An app may be able to gain root privileges Yes Yes Yes
CVE-2026-28972 Kernel An app may be able to cause unexpected system termination or write kernel memory Yes Yes Yes
CVE-2026-28986 Kernel An app may be able to cause unexpected system termination Yes Yes Yes
CVE-2026-28987 Kernel An app may be able to leak sensitive kernel state Yes Yes Yes
CVE-2026-28983 LaunchServices A remote attacker may be able to cause a denial of service Yes No No
CVE-2026-28929 Mail Drafts Replying to an email could display remote images in Mail in Lockdown Mode Yes Yes Yes
CVE-2026-43653 mDNSResponder An attacker on the local network may be able to cause a denial-of-service Yes No Yes
CVE-2026-28985 mDNSResponder An attacker on the local network may be able to cause a denial-of-service Yes No No
CVE-2026-43668 mDNSResponder A remote attacker may be able to cause unexpected system termination or corrupt kernel memory Yes Yes Yes
CVE-2026-43666 mDNSResponder An attacker on the local network may be able to cause a denial-of-service Yes Yes Yes
CVE-2026-28941 Model I/O Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents Yes Yes No
CVE-2026-28940 Model I/O Processing a maliciously crafted image may corrupt process memory Yes Yes No
CVE-2026-28961 Network Extensions An attacker with physical access to a locked device may be able to view sensitive user information Yes No No
CVE-2026-28906 Networking An attacker may be able to track users through their IP address Yes Yes Yes
CVE-2026-28840 PackageKit An app may be able to gain root privileges No Yes Yes
CVE-2026-43656 Quick Look Parsing a maliciously crafted file may lead to an unexpected app termination Yes Yes Yes
CVE-2026-43652 Sandbox An app may be able to access protected user data Yes No No
CVE-2026-39870 SceneKit Processing a maliciously crafted image may corrupt process memory Yes Yes Yes
CVE-2026-28846 SceneKit A remote attacker may be able to cause unexpected app termination Yes Yes Yes
CVE-2026-28993 Shortcuts An app may be able to access user-sensitive data Yes Yes Yes
CVE-2026-28848 SMB A remote attacker may be able to cause unexpected system termination Yes Yes No
CVE-2026-28930 Spotlight An app may be able to access protected user data Yes No No
CVE-2026-28974 Spotlight An app may be able to cause a denial-of-service Yes Yes No
CVE-2026-28996 Storage An app may be able to access sensitive user data Yes Yes Yes
CVE-2026-28919 StorageKit An app may be able to gain root privileges Yes Yes Yes
CVE-2026-28924 Sync Services An app may be able to access Contacts without user consent Yes Yes Yes
CVE-2026-39871 TV App An app may be able to observe unprotected user data Yes Yes Yes
CVE-2026-28976 UserAccountUpdater An app may be able to gain root privileges Yes No No
CVE-2026-43660 WebKit Processing maliciously crafted web content may prevent Content Security Policy from being enforced Yes No No
CVE-2026-28907 WebKit Processing maliciously crafted web content may prevent Content Security Policy from being enforced Yes No No
CVE-2026-28962 WebKit Processing maliciously crafted web content may disclose sensitive user information Yes No No
CVE-2026-43658 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash Yes No No
CVE-2026-28905 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28847 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28904 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28955 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28903 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28953 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28902 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28901 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28913 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28883 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28958 WebKit An app may be able to access sensitive user data Yes No No
CVE-2026-28917 WebKit Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28947 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash Yes No No
CVE-2026-28946 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash Yes No No
CVE-2026-28942 WebKit Processing maliciously crafted web content may lead to an unexpected Safari crash Yes No No
CVE-2026-28971 WebKit A malicious iframe may use another website's download settings Yes No No
CVE-2026-28944 WebRTC Processing maliciously crafted web content may lead to an unexpected process crash Yes No No
CVE-2026-28819 Wi-Fi An app may be able to execute arbitrary code with kernel privileges Yes Yes Yes
CVE-2026-28994 Wi-Fi An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Wi-Fi packets Yes Yes Yes
CVE-2026-28914 zip A maliciously crafted ZIP archive may bypass Gatekeeper checks Yes No No
CVE-2026-28920 zlib Visiting a maliciously crafted website may leak sensitive data Yes Yes Yes
CVEs marked with the scarab logo were reported through the TrendAI Zero Day Initiative program.

We’ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.

  • ✇Zero Day Initiative - Blog
  • The April 2026 Security Update Review Dustin Childs
    It’s time once again for Patch Tuesday, and this one is huge. We’ve also got multiple exploits in the wild, which adds another layer of urgency to this month’s release. Take a break from your regularly scheduled activities, and let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here:
     
  • ↗️

The April 2026 Security Update Review

✇Zero Day Initiative - Blog
Por:Dustin Childs
14 de Abril de 2026, 14:49

It’s time once again for Patch Tuesday, and this one is huge. We’ve also got multiple exploits in the wild, which adds another layer of urgency to this month’s release. Take a break from your regularly scheduled activities, and let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here:

Adobe Patches for April 2026

For April, Adobe released 12 bulletins addressing 61 unique CVEs in Adobe Acrobat Reader, InDesign, InCopy, FrameMaker, Connect, ColdFusion, Bridge, Photoshop, Illustrator, Experience Manager Screens, and the Adobe DNG SDK. Three of the Cold Fusion bugs came through the TrendAI ZDI program. For this month, I’m introducing an Adobe table as well. I’d love to get your feedback on whether this is helpful.

Bulletin ID Product CVE Count Highest Severity Highest CVSS Exploited Deployment Priority
APSB26-43 Adobe Acrobat Reader 1 Critical 8.6 Yes 1
APSB26-44 Adobe Acrobat Reader 2 Critical 8.6 No 2
APSB26-32 Adobe InDesign 9 Critical 7.8 No 3
APSB26-33 Adobe InCopy 2 Critical 7.8 No 3
APSB26-36 Adobe FrameMaker 11 Critical 8.6 No 3
APSB26-37 Adobe Connect 9 Critical 9.6 No 3
APSB26-38 Adobe ColdFusion 7 Critical 9.3 No 1
APSB26-39 Adobe Bridge 6 Critical 7.8 No 3
APSB26-40 Adobe Photoshop 1 Critical 7.8 No 3
APSB26-42 Adobe Illustrator 1 Critical 7.8 No 3
APSB26-34 Adobe Experience Manager Screens 9 Important 5.4 No 3
APSB26-41 Adobe DNG SDK 3 Important 5.5 No 3

Obviously, the active attack in Reader is the highest priority for this month, but don’t ignore the second bunch of Reader patches. Cold Fusion also gets a deployment priority of 1, so if you’re still running that platform, make sure you get the update. Otherwise, the FrameMaker and Connect patches fix 11 and nine bugs, respectively. InDesign and Experience Manager Screens also have nine CVEs addressed.

Outside of the Reader bug, none of the other bugs fixed by Adobe this month are listed as publicly known or under active attack at the time of release. One of the Reader bugs and Cold Fusion have a deployment priority of one, the other Reader bug has a priority of two, while all of the other updates released by Adobe this month are listed as deployment priority 3.

Microsoft Patches for April 2026

This month, Microsoft released a monstrous 163 new CVEs in Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, SQL Server, Hyper-V Server, BitLocker, and the Windows Wallet Service. Counting the third-party and a huge Chromium release, it brings the total number of CVEs to a staggering 247 updates. Six of these bugs were reported through the TrendAI ZDI program. Eight of these bugs are rated Critical, two are rated as Moderate, and the rest are rated Important in severity.

By my count, this is the second-largest monthly release in Microsoft’s history. There are many things we could speculate on to justify the size, but if Microsoft is like the other programs out there (including ours), they are likely seeing a rise in submissions found by AI tools. For us, our incoming rate has essentially tripled, making triage a challenge, to say the least. Whatever the reason, we have a lot of bugs to deal with this month. I should also point out that the Pwn2Own Berlin occurs next month, and it’s typical for vendors to patch as much as they can before the event.

There is one Microsoft bug listed as under active attack at the time of release, and one other that’s publicly known. Let’s take a closer look at some of the more interesting updates for this month, starting with the vulnerability being exploited in the wild:

-    CVE-2026-32201 - Microsoft SharePoint Server Spoofing Vulnerability
Microsoft doesn’t provide a lot of information about this bug, but Spoofing bugs in SharePoint often manifest as cross-site scripting (XSS) bugs. They do note that attackers could view information or make changes to disclosed information. As always, they don’t provide any information on how widespread these attacks are, but I wouldn’t wait to test and deploy this fix – especially if you have internet-connected SharePoint servers.

-    CVE-2026-33825 - Microsoft Defender Elevation of Privilege Vulnerability
This bug is listed as publicly known, and this time, we know exactly where it was disclosed. There have been some questions about how exploitable this bug may be, but it does look like it’s a real problem – just with some reliability issues in its current state. I won’t add on to the commentary from the researcher about working with Microsoft. I’m just glad they are offering a fix for the vulnerability. If you rely on Defender, test and deploy this one quickly.

-   CVE-2026-33827 - Windows TCP/IP Remote Code Execution Vulnerability
This vulnerability allows remote, unauthenticated attackers to exploit code on affected systems without user interaction. That adds up to a wormable bug – at least on systems with IPv6 and IPSec enabled. It is a race condition, which sets exploitability to High on the CVSS scale, but we see race conditions exploited at Pwn2Own all the time, so don’t rely on that obstacle. If you’re running IPv6, I would test and deploy this fix quickly before public exploits become available.

-    CVE-2026-33824 - Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Speaking of wormable bugs, here’s our second one this month. By the title, we can tell that systems with IKE enabled are affected, but that leaves plenty of targets for attackers. Microsoft also notes a significant mitigation for this bug. Blocking UDP ports 500 and 4500 at the perimeter prevents external attackers from reaching the affected service. However, insiders could still target this for lateral movement within an enterprise. For enterprises using IKE, get this fix tested and deployed with haste.

Here’s the full list of CVEs released by Microsoft for April 2026:

April 2026 Patch Tuesday
CVE Title Severity CVSS Public Exploited Type
CVE-2026-32201 Microsoft SharePoint Server Spoofing Vulnerability Important 6.5 No Yes Spoofing
CVE-2026-5281 * Chromium: CVE-2026-5281 Use after free in Dawn High N/A No Yes RCE
CVE-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability Important 7.8 Yes No EoP
CVE-2026-23666 .NET Framework Denial of Service Vulnerability Critical 7.5 No No DoS
CVE-2026-32190 Microsoft Office Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-33114 Microsoft Word Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-33115 Microsoft Word Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability Critical 8.8 No No RCE
CVE-2026-33826 Windows Active Directory Remote Code Execution Vulnerability Critical 8 No No RCE
CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-33827 Windows TCP/IP Remote Code Execution Vulnerability Critical 8.1 No No RCE
CVE-2026-26171 .NET Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-32226 .NET Framework Denial of Service Vulnerability Important 5.9 No No DoS
CVE-2026-32178 .NET Spoofing Vulnerability Important 7.5 No No Spoofing
CVE-2026-32203 .NET and Visual Studio Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-33116 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2023-20585 * AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability Important 5.3 No No RCE
CVE-2026-32072 Active Directory Spoofing Vulnerability Important 6.2 No No Spoofing
CVE-2026-25184 Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32171 Azure Logic Apps Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-32168 Azure Monitor Agent Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32192 Azure Monitor Agent Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32181 Connected User Experiences and Telemetry Service Denial of Service Vulnerability Important 5.5 No No DoS
CVE-2026-27924 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32152 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32154 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-27923 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32155 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-23653 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability Important 5.7 No No Info
CVE-2026-23653 * GitHub: CVE-2026-32631 'git clone' from manipulated repositories can leak NTLM hashes Important 7.4 No No Info
CVE-2026-33096 HTTP.sys Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-25250 * MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix Important 6 No No SFB
CVE-2026-26181 Microsoft Brokering File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32219 Microsoft Brokering File System Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32091 Microsoft Brokering File System Elevation of Privilege Vulnerability Important 8.4 No No EoP
CVE-2026-26152 Microsoft Cryptographic Services Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-33103 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-32188 Microsoft Excel Information Disclosure Vulnerability Important 7.1 No No Info
CVE-2026-32189 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-32197 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-32198 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-32199 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-32184 Microsoft High Performance Compute (HPC) Pack Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26155 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-27914 Microsoft Management Console Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26149 Microsoft Power Apps Security Feature Bypass Important 9 No No SFB
CVE-2026-32200 Microsoft PowerPoint Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-26143 Microsoft PowerShell Security Feature Bypass Vulnerability Important 7.8 No No SFB
CVE-2026-33120 † Microsoft SQL Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-20945 Microsoft SharePoint Server Spoofing Vulnerability Important 4.6 No No Spoofing
CVE-2026-33822 Microsoft Word Information Disclosure Vulnerability Important 6.1 No No Info
CVE-2026-33095 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-23657 Microsoft Word Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-32081 Package Catalog Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-26170 PowerShell Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26183 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26160 Remote Desktop Licensing Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26159 Remote Desktop Licensing Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26151 Remote Desktop Spoofing Vulnerability Important 7.1 No No Spoofing
CVE-2026-32085 Remote Procedure Call Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-32167 SQL Server Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-32176 SQL Server Elevation of Privilege Vulnerability Important 6.7 No No EoP
CVE-2026-0390 UEFI Secure Boot Security Feature Bypass Vulnerability Important 6.7 No No SFB
CVE-2026-32220 UEFI Secure Boot Security Feature Bypass Vulnerability Important 4.4 No No SFB
CVE-2026-32212 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-32214 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-32079 Web Account Manager Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-33104 Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32196 Windows Admin Center Spoofing Vulnerability Important 6.1 No No Spoofing
CVE-2026-26178 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-32073 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-26168 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26173 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-26177 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-26182 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-27922 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-33099 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-33100 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32088 Windows Biometric Service Security Feature Bypass Vulnerability Important 6.1 No No SFB
CVE-2026-27913 Windows BitLocker Security Feature Bypass Vulnerability Important 7.7 No No SFB
CVE-2026-26175 Windows Boot Manager Security Feature Bypass Vulnerability Important 4.6 No No SFB
CVE-2026-32162 Windows COM Elevation of Privilege Vulnerability Important 8.4 No No EoP
CVE-2026-20806 Windows COM Server Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-26176 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-27926 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32070 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-33098 Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26153 Windows Encrypted File System (EFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32087 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32093 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32086 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32150 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-27931 Windows GDI Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-27930 Windows GDI Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-32221 Windows Graphics Component Remote Code Execution Vulnerability Important 8.4 No No RCE
CVE-2026-27906 Windows Hello Security Feature Bypass Vulnerability Important 4.4 No No SFB
CVE-2026-27928 Windows Hello Security Feature Bypass Vulnerability Important 8.7 No No SFB
CVE-2026-26156 Windows Hyper-V Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-32149 Windows Hyper-V Remote Code Execution Vulnerability Important 7.3 No No RCE
CVE-2026-27910 Windows Installer Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-27912 Windows Kerberos Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-26179 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26180 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32195 Windows Kernel Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-26163 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32215 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-32217 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-32218 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-26169 Windows Kernel Memory Information Disclosure Vulnerability Important 6.1 No No Info
CVE-2026-27929 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32071 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-20930 Windows Management Services Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26162 Windows OLE Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-33101 Windows Print Spooler Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32084 Windows Print Spooler Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-27927 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26184 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32069 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32074 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32078 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26167 Windows Push Notifications Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-32158 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32159 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32160 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26172 Windows Push Notifications Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-20928 Windows Recovery Environment Security Feature Bypass Vulnerability Important 4.6 No No SFB
CVE-2026-32216 Windows Redirected Drive Buffering System Denial of Service Vulnerability Important 5.5 No No DoS
CVE-2026-27909 Windows Search Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26161 Windows Sensor Data Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26174 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32224 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-26154 Windows Server Update Service (WSUS) Tampering Vulnerability Important 7.5 No No Tampering
CVE-2026-26165 Windows Shell Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-26166 Windows Shell Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-27918 Windows Shell Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32151 Windows Shell Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-32225 Windows Shell Security Feature Bypass Vulnerability Important 8.8 No No SFB
CVE-2026-32202 Windows Shell Spoofing Vulnerability Important 4.3 No No Spoofing
CVE-2026-32082 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32083 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32068 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32183 Windows Snipping Tool Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-32089 Windows Speech Brokered Api Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32090 Windows Speech Brokered Api Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32153 Windows Speech Runtime Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-27907 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32076 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-27908 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-27921 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-27915 Windows UPnP Device Host Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-27919 Windows UPnP Device Host Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32075 Windows UPnP Device Host Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-27916 Windows UPnP Device Host Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-27920 Windows UPnP Device Host Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32077 Windows UPnP Device Host Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-27925 Windows UPnP Device Host Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-32156 Windows UPnP Device Host Remote Code Execution Vulnerability Important 7.4 No No RCE
CVE-2026-32223 Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability Important 6.8 No No EoP
CVE-2026-32165 Windows User Interface Core Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-27911 Windows User Interface Core Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32163 Windows User Interface Core Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-32164 Windows User Interface Core Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-23670 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability Important 5.7 No No SFB
CVE-2026-27917 Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32080 Windows WalletService Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-32222 Windows Win32k Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-21637 * HackerOne: CVE-2026-21637 TLS PSK/ALPN Callback Exceptions Bypass Error Handlers Moderate 7.5 No No SFB
CVE-2026-33119 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability Moderate 5.4 No No Spoofing
CVE-2026-33829 Windows Snipping Tool Spoofing Vulnerability Moderate 4.3 No No Spoofing
CVE-2026-5858 * Chromium: CVE-2026-5858 Heap buffer overflow in WebML Critical N/A No No RCE
CVE-2026-5859 * Chromium: CVE-2026-5859 Integer overflow in WebML Critical N/A No No RCE
CVE-2026-5272 * Chromium: CVE-2026-5272 Heap buffer overflow in GPU High N/A No No RCE
CVE-2026-5273 * Chromium: CVE-2026-5273 Use after free in CSS High N/A No No RCE
CVE-2026-5274 * Chromium: CVE-2026-5274 Integer overflow in Codecs High N/A No No RCE
CVE-2026-5275 * Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE High N/A No No RCE
CVE-2026-5276 * Chromium: CVE-2026-5276 Insufficient policy enforcement in WebUSB High N/A No No SFB
CVE-2026-5277 * Chromium: CVE-2026-5277 Integer overflow in ANGLE High N/A No No RCE
CVE-2026-5279 * Chromium: CVE-2026-5279 Object corruption in V8 High N/A No No RCE
CVE-2026-5280 * Chromium: CVE-2026-5280 Use after free in WebCodecs High N/A No No RCE
CVE-2026-5283 * Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE High N/A No No SFB
CVE-2026-5284 * Chromium: CVE-2026-5284 Use after free in Dawn High N/A No No RCE
CVE-2026-5285 * Chromium: CVE-2026-5285 Use after free in WebGL High N/A No No RCE
CVE-2026-5286 * Chromium: CVE-2026-5286 Use after free in Dawn High N/A No No RCE
CVE-2026-5287 * Chromium: CVE-2026-5287 Use after free in PDF High N/A No No RCE
CVE-2026-5289 * Chromium: CVE-2026-5289 Use after free in Navigation High N/A No No RCE
CVE-2026-5290 * Chromium: CVE-2026-5290 Use after free in Compositing High N/A No No RCE
CVE-2026-5860 * Chromium: CVE-2026-5860 Use after free in WebRTC High N/A No No RCE
CVE-2026-5861 * Chromium: CVE-2026-5861 Use after free in V8 High N/A No No RCE
CVE-2026-5862 * Chromium: CVE-2026-5862 Inappropriate implementation in V8 High N/A No No SFB
CVE-2026-5863 * Chromium: CVE-2026-5863 Inappropriate implementation in V8 High N/A No No SFB
CVE-2026-5864 * Chromium: CVE-2026-5864 Heap buffer overflow in WebAudio High N/A No No RCE
CVE-2026-5865 * Chromium: CVE-2026-5865 Type Confusion in V8 High N/A No No RCE
CVE-2026-5866 * Chromium: CVE-2026-5866 Use after free in Media High N/A No No RCE
CVE-2026-5867 * Chromium: CVE-2026-5867 Heap buffer overflow in WebML High N/A No No RCE
CVE-2026-5868 * Chromium: CVE-2026-5868 Heap buffer overflow in ANGLE High N/A No No RCE
CVE-2026-5869 * Chromium: CVE-2026-5869 Heap buffer overflow in WebML High N/A No No RCE
CVE-2026-5870 * Chromium: CVE-2026-5870 Integer overflow in Skia High N/A No No RCE
CVE-2026-5871 * Chromium: CVE-2026-5871 Type Confusion in V8 High N/A No No RCE
CVE-2026-5872 * Chromium: CVE-2026-5872 Use after free in Blink High N/A No No RCE
CVE-2026-5873 * Chromium: CVE-2026-5873 Out of bounds read and write in V8 High N/A No No RCE
CVE-2026-5291 * Chromium: CVE-2026-5291 Inappropriate implementation in WebGL Medium N/A No No SFB
CVE-2026-5292 * Chromium: CVE-2026-5292 Out of bounds read in WebCodecs Medium N/A No No Info
CVE-2026-5874 * Chromium: CVE-2026-5874 Use after free in PrivateAI Medium N/A No No RCE
CVE-2026-5875 * Chromium: CVE-2026-5875 Policy bypass in Blink Medium N/A No No SFB
CVE-2026-5876 * Chromium: CVE-2026-5876 Side-channel information leakage in Navigation Medium N/A No No Info
CVE-2026-5877 * Chromium: CVE-2026-5877 Use after free in Navigation Medium N/A No No RCE
CVE-2026-5878 * Chromium: CVE-2026-5878 Incorrect security UI in Blink Medium N/A No No Spoofing
CVE-2026-5879 * Chromium: CVE-2026-5879 Insufficient validation of untrusted input in ANGLE Medium N/A No No SFB
CVE-2026-5880 * Chromium: CVE-2026-5880 Incorrect security UI in browser UI Medium N/A No No Spoofing
CVE-2026-5881 * Chromium: CVE-2026-5881 Policy bypass in LocalNetworkAccess Medium N/A No No SFB
CVE-2026-5882 * Chromium: CVE-2026-5882 Incorrect security UI in Fullscreen Medium N/A No No Spoofing
CVE-2026-5883 * Chromium: CVE-2026-5883 Use after free in Media Medium N/A No No RCE
CVE-2026-5884 * Chromium: CVE-2026-5884 Insufficient validation of untrusted input in Media Medium N/A No No SFB
CVE-2026-5885 * Chromium: CVE-2026-5885 Insufficient validation of untrusted input in WebML Medium N/A No No SFB
CVE-2026-5886 * Chromium: CVE-2026-5886 Out of bounds read in WebAudio Medium N/A No No Info
CVE-2026-5887 * Chromium: CVE-2026-5887 Insufficient validation of untrusted input in Downloads Medium N/A No No SFB
CVE-2026-5888 * Chromium: CVE-2026-5888 Uninitialized Use in WebCodecs Medium N/A No No RCE
CVE-2026-5889 * Chromium: CVE-2026-5889 Cryptographic Flaw in PDFium Medium N/A No No SFB
CVE-2026-5890 * Chromium: CVE-2026-5890 Race in WebCodecs Medium N/A No No RCE
CVE-2026-5891 * Chromium: CVE-2026-5891 Insufficient policy enforcement in browser UI Medium N/A No No SFB
CVE-2026-5892 * Chromium: CVE-2026-5892 Insufficient policy enforcement in PWAs Medium N/A No No SFB
CVE-2026-5893 * Chromium: CVE-2026-5893 Race in V8 Medium N/A No No RCE
CVE-2026-5894 * Chromium: CVE-2026-5894 Inappropriate implementation in PDF Low N/A No No SFB
CVE-2026-5895 * Chromium: CVE-2026-5895 Incorrect security UI in Omnibox Low N/A No No Spoofing
CVE-2026-5896 * Chromium: CVE-2026-5896 Policy bypass in Audio Low N/A No No SFB
CVE-2026-5897 * Chromium: CVE-2026-5897 Incorrect security UI in Downloads Low N/A No No Spoofing
CVE-2026-5898 * Chromium: CVE-2026-5898 Incorrect security UI in Omnibox Low N/A No No Spoofing
CVE-2026-5899 * Chromium: CVE-2026-5899 Incorrect security UI in History Navigation Low N/A No No Spoofing
CVE-2026-5900 * Chromium: CVE-2026-5900 Policy bypass in Downloads Low N/A No No SFB
CVE-2026-5901 * Chromium: CVE-2026-5901 Policy bypass in DevTools Low N/A No No SFB
CVE-2026-5902 * Chromium: CVE-2026-5902 Race in Media Low N/A No No RCE
CVE-2026-5903 * Chromium: CVE-2026-5903 Policy bypass in IFrameSandbox Low N/A No No SFB
CVE-2026-5904 * Chromium: CVE-2026-5904 Use after free in V8 Low N/A No No RCE
CVE-2026-5905 * Chromium: CVE-2026-5905 Incorrect security UI in Permissions Low N/A No No Spoofing
CVE-2026-5906 * Chromium: CVE-2026-5906 Incorrect security UI in Omnibox Low N/A No No Spoofing
CVE-2026-5907 * Chromium: CVE-2026-5907 Insufficient data validation in Media Low N/A No No SFB
CVE-2026-5908 * Chromium: CVE-2026-5908 Integer overflow in Media Low N/A No No RCE
CVE-2026-5909 * Chromium: CVE-2026-5909 Integer overflow in Media Low N/A No No RCE
CVE-2026-5910 * Chromium: CVE-2026-5910 Integer overflow in Media Low N/A No No RCE
CVE-2026-5911 * Chromium: CVE-2026-5911 Policy bypass in ServiceWorkers Low N/A No No SFB
CVE-2026-5912 * Chromium: CVE-2026-5912 Integer overflow in WebRTC Low N/A No No RCE
CVE-2026-5913 * Chromium: CVE-2026-5913 Out of bounds read in Blink Low N/A No No Info
CVE-2026-5914 * Chromium: CVE-2026-5914 Type Confusion in CSS Low N/A No No RCE
CVE-2026-5915 * Chromium: CVE-2026-5915 Insufficient validation of untrusted input in WebML Low N/A No No SFB
CVE-2026-5918 * Chromium: CVE-2026-5918 Inappropriate implementation in Navigation Low N/A No No SFB
CVE-2026-5919 * Chromium: CVE-2026-5919 Insufficient validation of untrusted input in WebSockets Low N/A No No SFB
CVE-2026-33118 Microsoft Edge (Chromium-based) Spoofing Vulnerability Low 4.3 No No Spoofing

* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.

† Indicates further administrative actions are required to fully address the vulnerability.

 

Looking at the other Critical-rated bugs in this month’s release, there are three Office-related bugs where the Preview Pane is once again listed as an exploit vector. I would still like to have a full-proof way of disabling the Preview Pane, but I don’t see that as an option. There’s a bug in the RDP client, but that involves connecting to a malicious RDP server. The bug in Active Directory requires authentication and a network adjacent attacker. The final Critical-rated bug is an interesting DoS in .NET Framework. An unauthenticated attacker could deny service over a network – presumably crippling any affected app made in .NET. You rarely see Critical-rated DoS bugs, but this one deserves the moniker.

Moving on to the other code execution bugs, you have quite a few open-and-own bugs in Office components, most notably Excel, where the Preview Pane is not an attack vector. The bug in SQL Server requires authentication, and as usual, additional steps are needed to ensure you have the correct update to remediate this vulnerability. The two bugs in Hyper-V almost reads like a privilege escalation since it allows unauthorized attackers to execute code locally. That’s the same for the bugs in the Windows Snipping Tool and the UPnP Device host.

More than half of this release addresses Elevation of Privilege (EoP) bugs. However, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there’s not much to add without further technical details about the bugs themselves. The bugs in SQL Server could allow an attacker to gain SQL sysadmin privileges. One of the kernel bugs simply states an attacker could “elevate privileges locally”. How obtuse. That’s similar for the bug in afd.sys and Desktop Windows Manager, but Microsoft also states that these bugs could crash an affected system. There are several bugs that result in a sandbox escape, including Windows Push Notifications, AFD for Winsock, Management Services, and User Interface Core. Of these, CVE-2026-26167 (Push Notifications) is the most notable — it's the only one with low attack complexity, meaning no race condition needed. The rest all require winning a race condition (AC:H). The bugs in UPnP are interesting as they allow attackers to gain access to a limited set of administrator-protected objects. Not a full escalation but definitely getting access to resources they shouldn’t. The vulnerability in the Brokering File System allows attackers to gain the level of the logged on user, so don’t do your normal activities as a user with admin privileges. The bug in Azure Monitor Agent leads to root-level access.

There are a dozen different security features bypass bugs in the April release. Some of these are obvious by the title alone. For example, the bugs in Windows Hello bypass safety features within the Hello app itself. The bug in the Biometric Service allows attackers to bypass biometric protections. The vulns in BitLocker and Secure Boot bypass protections in those components. The bug in Power Apps allows attackers to bypass a security warning dialog and trick targets into triggering an external protocol call that performs unintended actions on the user’s device. The bug in Windows Shell allows attackers to bypass Mark of the Web (MotW) protections. The bug in PowerShell could almost be described as a code execution bug as exploiting it bypasses dynamic-expression security checks, which could result in code execution. The vulnerability in the Windows Recovery Environment allows local attackers to bypass BitLocker device encryption. Finally, the bug in Virtualization‑Based Security (VBS) is the most interesting of the bunch – and not just because VBS is a (relatively) new feature. The problem allows attackers to manipulate allow a compromised Windows kernel to modify memory belonging to the secure kernel, breaking the intended isolation guarantees provided by VBS. Somewhat of a sandbox escape, but this time, you’re escaping from Virtual Trust Level 0 (VTL0) to Virtual Trust Level 1 (VTL1). Neat.

Moving on to the Information Disclosure bugs fixed this month, we have 20 different CVEs. Fortunately, most of these simply result in info leaks consisting of unspecified memory contents or memory addresses. While useful in crafting exploits, they aren’t exactly exciting on their own. There are also several bugs that disclose addresses from an object a contained in a sandboxed execution environment. This includes bugs in the Print Spooler, Package Catalog, and Web Account Manager. The bug in Dynamics 365 discloses the ever ineffable “sensitive information”. There are three different info disclosure bugs in UPnP. Two allow an attacker to read from the file system, while the third discloses anything available to the LOCAL SERVICE account. The final info disclosure bug resides in Copilot and Visual Studio and allows attackers to disclose the contents of the Model Context Protocol (MCP) when using Copilot. There are those who think MCP is dead (thanks to agentic AI agents), but if you’re using a custom MCP, I doubt you would want it leaked.

The April release contains just a handful of Spoofing bugs. Some, like the bugs in .NET, Active Directory, and Windows Shell, just say that they allow spoofing over a network. Others, like the bug in Windows Snipping Tool, say similar but also note that it could be used to relay NTLMv2 hashes. The patch for RDP notes that there are new warning dialogs coming this month. The bug in the Windows Admin Center would allow an attacker to interact with other tenant’s applications and content. Finally, the spoofing bug in SharePoint is another XSS issue.

There are eight DoS bugs in the April release, but as always, Microsoft provides no actionable information about the vulnerabilities. Microsoft does offer a mitigation for the http.sys bug that can be applied while you test and deploy the patch, but I would rely on the patch rather than the mitigation. Another exception is the bug for Connected User Experiences and Telemetry Service, which allows attackers to deny service locally rather than over the network.

The final(!) bug in the April release is a Tampering bug in WSUS that reads like a DoS. According to Microsoft, “An attacker can send specially crafted packets which could affect availability of the service and result in Denial of Service (DoS).” But sure – let’s call it Tampering.

No new advisories are being released this month.

Looking Ahead

I will be in Berlin for the next Patch Tuesday, which will be May 12, and I’ll provide my full thoughts then on what will hopefully be a smaller release than this one. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

  • ✇Zero Day Initiative - Blog
  • Announcing Pwn2Own Berlin for 2026 Dustin Childs
    If you just want to read the contest rules, click here. Willkommen zurück, meine Damen und Herren, zu unserem zweiten Wettbewerb in Berlin! That’s correct (if Google translate didn’t steer me wrong). After our inaugural competition last year, Pwn2Own returns to Berlin and OffensiveCon. Outside of our shipping troubles, we had an amazing time and can’t wait to get back.Last year, we added Artificial Intelligence as a category with great results. This year, we’re expanding this and splitting it in
     
  • ↗️

Announcing Pwn2Own Berlin for 2026

✇Zero Day Initiative - Blog
Por:Dustin Childs
12 de Março de 2026, 13:25

If you just want to read the contest rules, click here.

 

Willkommen zurück, meine Damen und Herren, zu unserem zweiten Wettbewerb in Berlin! That’s correct (if Google translate didn’t steer me wrong). After our inaugural competition last year, Pwn2Own returns to Berlin and OffensiveCon. Outside of our shipping troubles, we had an amazing time and can’t wait to get back.

Last year, we added Artificial Intelligence as a category with great results. This year, we’re expanding this and splitting it into multiple different categories: AI Databases, Coding Agents, Local Inferences, and a separate category for NVIDIA products. In last year’s contest, NVIDIA targets had wins, losses, and collisions, so it will be interesting to see how they fare this year. The folks from AWS wanted to get into the fray as well, so they stepped up to co-sponsor this year’s event, which allows us to increase the reward for bugs in Firecracker. Of course, we have all of the returning categories as well, including web browsers, containers, servers, virtualization, and operating systems. There’s more than $1,000,000 in cash and prizes available for contestants. Last year, we awarded $1,078,750 for 28 unique 0-days over the three-day event. We’ll see if we can eclipse those numbers in 2026.

The contest begins on May 14, but registration closes on May 7, so don’t delay in getting those submissions in. We’re hoping for maximum participation, so set aside your vibe coding and show us what you can really do. We’re looking forward to some cutting-edge exploitation on display. For 2026, we have a total of 31 targets across 10 categories. Here is a full list of the categories for this year’s event:  

-- Virtualization
-- Web Browser
-- Enterprise Applications
-- Servers
-- Local Escalation of Privilege
-- Containers
-- AI Database
-- Coding Agents
-- Local Inference
-- NVIDIA

Of course, no Pwn2Own competition would be complete without us crowning a Master of Pwn (Meister von Pwn?). Since the order of the contest is decided by a random draw, contestants with an unlucky draw could still demonstrate fantastic research but receive less money since subsequent rounds go down in value. However, the points awarded for each unique, successful entry do not go down. Someone could have a bad draw and still accumulate the most points. The person or team with the most points at the end of the contest will be crowned Master of Pwn, receive 65,000 ZDI reward points (enough for Platinum status), a killer trophy, and a pretty snazzy jacket to boot.

Let's look at the details of the rules for this year's event.

Virtualization Category

Some of the highlights for each contest can be found in the Virtualization Category, and we’re thrilled to see what this year’s event could bring with it. As usual, VMware is the main highlight of this category as we’ll have VMware ESXi return with an award of $150,000. Last year produced the first ESXi exploits in Pwn2Own history, so it will be interesting to see if we get more. Microsoft also returns as a target and leads the virtualization category with a $250,000 award for a successful Hyper-V Client guest-to-host escalation. Kernel-based Virtual Machine (KVM) is our final target in this category with a prize of $50,000.

There’s an add-on bonus in this category as well. If a contestant can escape the guest OS, then gain arbitrary code execution on the virtualization target and obtain arbitrary code execution in the guest operating system on a separate virtual machine managed by the same targeted virtualization target, they’ll earn another $50,000. That could push the payout on a ESXi bug to $200,000. This bonus is for KVM and ESXi only. Here’s a detailed look at the targets and available payouts in the Virtualization category:

Back to top

Web Browser Category

While browsers are the “traditional” Pwn2Own target, we’re continuously tweaking the targets in this category to ensure they remain relevant. We re-introduced renderer-only exploits a couple of years ago, and this year, we’ve increased the award to $75,000. In fact, we’ve increased the awards across the board for this category. Here’s a detailed look at the targets and available payouts:

Back to top

Enterprise Applications Category

Enterprise applications return as targets with Adobe Reader and various Office components on the target list once again. Attempts in this category must be launched from the target under test. For example, launching the target under test from the command line is not allowed. Prizes in this category run from $50,000 for a Reader exploit with a sandbox escape or a Reader exploit with a kernel privilege escalation, and $150,000 for an Office 365 application. Word, Excel, and PowerPoint are all valid targets. Microsoft Office-based targets will have Protected View enabled where applicable. Adobe Reader will have Protected Mode enabled where applicable.

This year, we’re adding a bonus for Copilot data exfiltration and Copilot action execution. Microsoft just patched a bug like this in Excel, so we know they are out there. If you’re able to exploit Copilot in addition to a Microsoft application, you’ll earn an additional $50,000. There are quite a few rules and scenarios around this add-on, so be sure to read the rules carefully and contact us with questions. Here’s a detailed view of the targets and payouts in the Enterprise Application category:

Back to top

The Server Category

The Server Category for 2026 focuses solely on the server components we’re most interested in. These servers are often targeted by everyone from ransomware crews to nation/state actors, so we know there are exploits out there for them. The only question is whether we’ll see any of the competitors bring one of those exploits to Pwn2Own. Last year, the bugs demonstrated in SharePoint ended up being exploited in the wild, so we know people are looking for these with great interest. Microsoft Exchange has been a popular target for some time, and it returns as a target this year as well, with a payout of $200,000. This category is rounded out by Microsoft Windows RDP/RDS, which also has a payout of $200,000. Here’s a detailed look at the targets and payouts in the Server category:

Back to top

Local Escalation of Privilege Category

This category is a classic for Pwn2Own and focuses on attacks that originate from a standard user and result in executing code as a high-privileged user. A successful entry in this category must leverage a kernel vulnerability to escalate privileges. Red Hat Enterprise Linux for Workstations returns as our Linux-based target, while Apple macOS, and Microsoft Windows 11 return as targets in this category. Prior exploits in this category have won Pwnie awards, so they’re always interesting to see. Here’s a detailed look at the targets and payouts in this category:

Back to top

The Container Category

We’re excited to have this category return for its third season, and we’re hopeful that even more contestants will target one of these container targets. For an attempt to be ruled a success against these three, the exploit must be launched from within the guest container/microVM and execute arbitrary code on the host operating system. Again, with help from AWS, Firecracker returns as a target with a prize of $100,000. Here are the targets and payouts for this category:

Back to top

AI Database Category

In the past, AI Hackathons have focused on using AI to develop vulnerabilities or other offensive frameworks. We’re opening up the models and various components themselves for exploitation. The first AI sub-category focuses on databases. An attempt in this category must be launched from the contestant’s laptop. Here’s a look at the targets and awards in the AI Database category:

Back to top

The Coding Agent Category

Let’s face it. At some point or another, we’ve probably all vibe coded something. There’s no shame in that, but how secure are the tools we use for vibe coding? Well, let’s take the most popular choices and find out. A successful entry must interact with a contestant-controlled resource (e.g. web page, repository, media file) to exploit a vulnerability within the coding agent. The attack vector of the entry must be a common coding agent use case. There are few things out of scope here as well. UI spoofing or misrepresentation unrelated to permission prompts, model jailbreaks or prompt outputs that do not cross security boundaries, and vulnerabilities that require unsafe or permission-less modes are just a few of the things not allowed. As this is a new category, please read the rules carefully to ensure your entry qualifies. Here’s a look at the targets and awards in the AI Coding Agent category:

Back to top

The Local Inference Category

We couldn’t leave local inference and LLMs out of Pwn2Own. These products claim to provide enhanced data privacy, zero-cost inference, lower latency, and fully offline functionality. We’ll see how the security stacks up. An attempt in this category must be launched from the contestant’s laptop within the contest network. Here are the targets and payouts for the Local Inference category:

Back to top

The NVIDIA Category

Our last AI sub-category focuses solely on NVIDIA products. For network accessible targets, an attempt must be launched from the contestant's laptop within the contest network. For NV Container Toolkit, the attempt must be launched from within a crafted container image and execute arbitrary code on the host operating system. For Megatron Bridge, entries that leverage vulnerabilities pertaining to pickle deserialization or that leverage a vulnerability when “trust_remote_code=true” are out of scope. Here are the targets and payouts for the NVIDIA category:

Back to top

Conclusion

The complete rules for Pwn2Own Berlin 2026 are found here. As always, we highly encourage entrants to read the rules thoroughly if they choose to participate. If you are thinking about participating but have specific configuration or rule-related questions, email us. Questions asked over X (nee Twitter), BlueSky, or other means will not be answered. Registration is required to ensure we have sufficient resources on hand at the event. Please contact ZDI at pwn2own@trendmicro.com to begin the registration process. Registration for onsite participation closes at 5 p.m. Central European Time on May 7, 2026.

Be sure to stay tuned to this blog and follow us on Twitter, Mastodon, LinkedIn, or Bluesky for the latest information and updates about the contest. We look forward to seeing everyone in Germany, and we hope to see some of the best in the world show what they can do – vibe coded or not.

With special thanks to our Pwn2Own Berlin 2026 partners AWS, for providing their expertise and technology.

© 2026 Trend Micro Incorporated. All rights reserved. PWN2OWN, ZERO DAY INITIATIVE, ZDI, ZERO DAY INITIATIVE, TrendAI, and Trend Micro are trademarks or registered trademarks of Trend Micro Incorporated. All other trademarks and trade names are the property of their respective owners.

  • ✇Zero Day Initiative - Blog
  • The March 2026 Security Update Review Dustin Childs
    I am back in the friendly confines of the Mid-South headquarters of TrendAI ZDI (a.k.a. my home office), and am all set for the third patch Tuesday of 2026. Take a break from your regularly scheduled activities and let’s take a look at the latest security patches from Adobe and Microsoft.If you’d rather watch the full video recap covering the entire release, you can check it out here:
     
  • ↗️

The March 2026 Security Update Review

✇Zero Day Initiative - Blog
Por:Dustin Childs
10 de Março de 2026, 14:57

I am back in the friendly confines of the Mid-South headquarters of TrendAI ZDI (a.k.a. my home office), and am all set for the third patch Tuesday of 2026. Take a break from your regularly scheduled activities and let’s take a look at the latest security patches from Adobe and Microsoft.If you’d rather watch the full video recap covering the entire release, you can check it out here:

Adobe Patches for March 2026

For March, Adobe released eight bulletins addressing 80 unique CVEs in Adobe Acrobat Reader, Commerce, Illustrator, Substance 3D Painter, Premier Pro, Experience Manager, Substance 3D Stager, and the Adobe DNG Software Development Kit (SDK). Two of these bugs were submitted through the TrendAI ZDI program. If you need to prioritize, the update for Acrobat likely has the most impact, with the patch fixing two Critical-rated and one Important bugs. The fix for Experience Manager is the largest this month with 33 CVEs addressed. However, these are simple cross-site scripting (XSS) bugs, so it’s not too exciting. The fix for Commerce is also quite large with 19 CVEs. Most of these are also XSS bugs, but there’s a few security feature bypass bugs in there, too. Adobe actually gives this patch a deployment priority of 2, but it’s not under active attack at the time of release.

The fix for Illustrator corrects seven bugs, including a few Critical-rated ones. The patch for Substance 3D Painter fixes nine different CVEs, all rated Important. That’s not the case for Substance 3D Stager, which fixes six different Critical bugs that could lead to arbitrary code execution. The patch for the Adobe DNG Software Development Kit (SDK) addresses one Critical and one Important bug. Finally, the update for Premiere Pro correct a single, Critical-rated bug that could lead to arbitrary code execution.

None of the bugs fixed by Adobe this month are listed as publicly known or under active attack at the time of release, and beyond the update for Commerce, all of the other updates released by Adobe this month are listed as deployment priority 3.

Microsoft Patches for March 2026

This month, Microsoft released 84 new CVEs in Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, SQL Server, Hyper-V Server, and the Windows Resilient File System (ReFS). Counting the third-party and Chromium updates listed in the release, it brings to total number of CVEs to 94. Five of these bugs were reported through the TrendAI ZDI program. Eight of these bugs are rated Critical, and the rest are rated Important in severity.

This volume is relatively typical for a March release, and the lack of bugs under active attack is a nice change from last month. There are two vulnerabilities listed as publicly known at the time of release, but none listed as actively exploited.

Let’s take a closer look at some of the more interesting updates for this month, starting with a bug with an AI slant:

-    CVE-2026-26144 - Microsoft Excel Information Disclosure Vulnerability
This is a fascinating bug and an attack scenario we’re likely to see more often. The vulnerability is a simple cross-site scripting (XSS) bug in Excel, but an attacker could use it to cause the Copilot Agent to exfiltrate data off the target. This essentially makes it a zero-click information disclosure. Although not stated, the disclosure is likely at the level of the logged-on user, so there isn’t a privilege escalation component. Info disclosures rarely get rated Critical, but it makes sense here.

-    CVE-2026-26110/CVE-2026-26113 - Microsoft Office Remote Code Execution Vulnerability
Another month and another pair of Office bugs where the Preview Pane is an exploit vector. I’ve lost count of how many of these bugs have been patched over the last year, but it’s just a matter of time until they start appearing in active exploits. The latest versions of Outlook allow you to hide the Preview Pane, but it isn’t clear if this would mitigate these attacks. The best option is still to test and deploy the update, but considering how many of these patches exist, it’s likely further updates will be needed to fully address these issues.

-    CVE-2026-23669 - Windows Print Spooler Remote Code Execution Vulnerability
Just reading the title makes me twitch with remembrances of Print Nightmare from a few years ago. This bug works in the same manner as those exploits. An authenticated attacker sends specially crafted messages to an affected system to gain arbitrary code execution. No user interaction is required. Let’s hope we don’t end up in a new nightmare of spooler exploits. Test and deploy this one quickly.

-    CVE-2026-23668 - Windows Graphics Component Elevation of Privilege Vulnerability
This vulnerability was submitted to the ZDI program by Marcin Wiązowski as two separate bugs, and it demonstrates the need for variant investigations when creating security patches. Both cases are caused by the lack of proper locking when performing operations on an object. However, in one case, it’s in the cdd.dll driver while the other is in the win32kfull driver. Either way, an attacker could use these to elevate privileges to SYSTEM and execute arbitrary code. Since the fix for both is to add object locking to the GDI object, the cases are combined into a single CVE. That’s not a problem, but it does show how variants can occur, and fixes should be as broad as possible.

Here’s the full list of CVEs released by Microsoft for March 2026:

CVE Title Severity CVSS Public Exploited Type
CVE-2026-26127 .NET Denial of Service Vulnerability Important 7.5 Yes No DoS
CVE-2026-21262 SQL Server Elevation of Privilege Vulnerability Important 8.8 Yes No EoP
CVE-2026-23651 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability Critical 6.7 No No EoP
CVE-2026-26124 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability Critical 6.7 No No EoP
CVE-2026-26122 Microsoft ACI Confidential Containers Information Disclosure Vulnerability Critical 6.5 No No Info
CVE-2026-21536 Microsoft Devices Pricing Program Remote Code Execution Vulnerability Critical 9.8 No No RCE
CVE-2026-26144 Microsoft Excel Information Disclosure Vulnerability Critical 7.5 No No Info
CVE-2026-26110 Microsoft Office Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-26113 Microsoft Office Remote Code Execution Vulnerability Critical 8.4 No No RCE
CVE-2026-26125 Payment Orchestrator Service Elevation of Privilege Vulnerability Critical 8.6 No No EoP
CVE-2026-26131 .NET Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-25177 Active Directory Domain Services Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26130 ASP.NET Core Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-23661 Azure IoT Explorer Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-23662 Azure IoT Explorer Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-23664 Azure IoT Explorer Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-26121 Azure IOT Explorer Spoofing Vulnerability Important 7.5 No No Spoofing
CVE-2026-26118 Azure MCP Server Tools Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-23667 Broadcast DVR Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-25190 GDI Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-25181 GDI+ Information Disclosure Vulnerability Important 7.5 No No Info
CVE-2026-26030 * GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable Important 9.9 No No RCE
CVE-2026-23654 * GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-26141 Hybrid Worker Extension (Arc-enabled Windows VMs) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-23665 † Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-23674 MapUrlToZone Security Feature Bypass Vulnerability Important 7.5 No No SFB
CVE-2026-26123 Microsoft Authenticator Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-26148 † Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability Important 8.1 No No EoP
CVE-2026-25167 Microsoft Brokering File System Elevation of Privilege Vulnerability Important 7.4 No No EoP
CVE-2026-26107 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-26108 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-26109 Microsoft Excel Remote Code Execution Vulnerability Important 8.4 No No RCE
CVE-2026-26112 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-26134 Microsoft Office Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26106 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-26114 Microsoft SharePoint Server Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-26105 Microsoft SharePoint Server Spoofing Vulnerability Important 8.1 No No Spoofing
CVE-2026-24283 Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-25165 Performance Counters for Windows Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-24282 Push message Routing Service Elevation of Privilege Vulnerability Important 5.5 No No Info
CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-26116 SQL Server Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-20967 System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-24285 Win32k Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-24291 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-25186 Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-23660 † Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-24293 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-25176 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-25178 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-25179 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-23656 Windows App Installer Spoofing Vulnerability Important 5.9 No No Spoofing
CVE-2026-25171 Windows Authentication Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-23671 Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-24295 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-24296 Windows Device Association Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-25189 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-25174 Windows Extensible File Allocation Table Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-25168 Windows Graphics Component Denial of Service Vulnerability Important 6.2 No No DoS
CVE-2026-25169 Windows Graphics Component Denial of Service Vulnerability Important 6.2 No No DoS
CVE-2026-23668 Windows Graphics Component Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-25180 Windows Graphics Component Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-25170 Windows Hyper-V Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-24297 Windows Kerberos Security Feature Bypass Vulnerability Important 6.5 No No SFB
CVE-2026-24287 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-24289 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26132 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-24288 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Important 6.8 No No RCE
CVE-2026-25175 Windows NTFS Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-23669 Windows Print Spooler Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-24290 Windows Projected File System Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-23673 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-25172 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-25173 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-26111 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-25185 Windows Shell Link Processing Spoofing Vulnerability Important 5.3 No No Spoofing
CVE-2026-24294 Windows SMB Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-26128 Windows SMB Server Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-25166 Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability Important 7.8 No No RCE
CVE-2026-25188 Windows Telephony Service Elevation of Privilege Vulnerability Important 8.8 No No EoP
CVE-2026-23672 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-25187 Winlogon Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-3536 * Chromium: CVE-2026-3536 Integer overflow in ANGLE Critical N/A No No RCE
CVE-2026-3538 * Chromium: CVE-2026-3538 Integer overflow in Skia Critical N/A No No RCE
CVE-2026-3539 * Chromium: CVE-2026-3539 Object lifecycle issue in DevTools High N/A No No RCE
CVE-2026-3540 * Chromium: CVE-2026-3540 Inappropriate implementation in WebAudio High N/A No No RCE
CVE-2026-3541 * Chromium: CVE-2026-3541 Inappropriate implementation in CSS High N/A No No RCE
CVE-2026-3542 * Chromium: CVE-2026-3542 Inappropriate implementation in WebAssembly High N/A No No RCE
CVE-2026-3543 * Chromium: CVE-2026-3543 Inappropriate implementation in V8 High N/A No No RCE
CVE-2026-3544 * Chromium: CVE-2026-3544 Heap buffer overflow in WebCodecs High N/A No No RCE
CVE-2026-3545 * Chromium: CVE-2026-3545 Insufficient data validation in Navigation High N/A No No RCE

* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.

† Indicates further administrative actions are required to fully address the vulnerability.

 

Looking at the other Critical-rated bugs in this month’s release, they are all cloud-native and require no user action. Microsoft has already remediated the vulnerabilities.

Moving on to the other code execution bugs, the vulnerabilities in SharePoint Server pop out first. Both require authentication, but it’s essentially the lowest level of authentication, so these would be ideal cases for lateral movement within an enterprise. There are the standard open-and-own cases within Office components. There an interesting sounding bug in the Windows Mobile Broadband Driver that requires physical access, but Microsoft doesn’t elaborate on the attack scenario beyond that fact. The bug in the System Image Manager Assessment and Deployment Kit (ADK) requires authentication. The bug in GDI requires user interaction. The remaining code execution bugs are in the RRAS protocol. We’ve seen bugs in this component in the past, but never in the wild. I wouldn’t ignore these, but I wouldn’t rush them out either.

Similar to last month, updates for Elevation of Privilege (EoP) bugs make up nearly half of this month’s release. And as we saw last month, but most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges. The bugs in SQL Server allow attackers to elevate to SQL sysadmin privileges. The bug in the Azure MCP Server is more complex. It allows attackers to obtain the permissions associated with the MCP Server’s managed identity, which lets them perform actions that the managed identity is able to reach. The bug in the Azure AD SSH Login extension for Linux leads to root access, and it won’t be easy to patch. You’ll need to run the update instructions from the command line on each affected system. That’s the same case for the bug in the Linux Azure Diagnostic extension (LAD). There’s an odd bug in the Hybrid Worker Extension (Arc‑enabled Windows VMs) that leads to “ELEVATED” privileges, which is something I’ve never seen before. The bug in the Broadcast DVR component allows an attacker to go from low integrity level up to medium. There’s a bug listed as an EoP in the Push message Routing Service, but reading the description, Microsoft notes it could lead to an information disclosure. It’s likely this is an error and should be an Information Disclosure bug. The final EoP is in the Azure Portal Windows Admin Center and leads to SYSTEM. However, there’s no patch to remediate this bug. Instead, you need to install the latest version of the Windows Admin Center extension through the Azure Portal by hand.

There are two security feature bypass patches in the March release. The first is a bypass of the MapURLToZone method, which (as expected) allows attackers to bypass MapURLToZone protections. The third bypass is in Kerberos and could allow an attacker to either view some sensitive information or make changes to “disclosed” information. This is a race condition that occurs while the group policy is being reapplied, so the window to exploit this would be extremely small.

Looking at the remaining info disclosure bugs getting patched this month, only two result in info leaks consisting of unspecified memory contents or memory addresses. Ther others provide more interesting results. There are three bugs in the Azure IoT Explorer have some wide-ranging implications. According to Microsoft, exploitation could result in, “device connection information, authentication tokens, request data, file paths, and other information transmitted between the application and the IoT Hub.” The bug in Authenticator almost reads like a security feature bypass, as exploit results in the disclosure of a one‑time sign‑in code or authentication deep link. The attacker would receive the sign‑in information and could potentially use it to authenticate as the user, allowing access to information or services available to that account. The last info disclosure bug is in the Accessibility Infrastructure and allows an attacker to gain secrets or privileged information belonging to the user of the affected application.

There are only four spoofing bugs in the March release. The first is in SharePoint server and manifests as an XSS. The second bug is a Server-Side Request Forgery (SSRF) in the Azure IoT Explorer. The remaining two are a bit more cryptic. The bug in Windows Shell Link Processing results from the “exposure of sensitive information to an unauthorized actor,” and could lead to spoofing. That sounds like credential exposure, but it’s not explicitly called out. The final spoofing bug results from the insufficient verification of data authenticity in Windows App Installer. Again, this sounds vaguely like credential reflection, but without further information, we can only speculate.

Finally, there are four denial-of-service (DoS) bugs in the release, including one that’s listed as publicly known in the .NET Framework. As usual, Microsoft provides no actionable information about these bugs.

No new advisories are being released this month.

Looking Ahead

I plan on being at RSA for the first time in my career, so if you’re around, please stop by and say hello. I like it when people say hello. Otherwise, I’ll be back on April 14 with my assessment of that patch Tuesday release. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

  • ✇Zero Day Initiative - Blog
  • The February 2026 Security Update Review Dustin Childs
    I have survived the biggest Pwn2Own ever, but I’m back in Tokyo for the second Patch Tuesday of 2026. My location never stops Patch Tuesday from coming, so let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here: Adobe Patches for February
     
  • ↗️

The February 2026 Security Update Review

✇Zero Day Initiative - Blog
Por:Dustin Childs
10 de Fevereiro de 2026, 15:30

I have survived the biggest Pwn2Own ever, but I’m back in Tokyo for the second Patch Tuesday of 2026. My location never stops Patch Tuesday from coming, so let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here:

Adobe Patches for February 2026

For February, Adobe released nine bulletins addressing 44 unique CVEs in Adobe Audition, After Effects, InDesign, Substance 3D Designer, Substance 3D Stager, Adobe Bridge, Substance 3D Modeler, Lightroom Classic, and the Adobe DNG Software Development Kit (SDK). The largest update here is for After Effects, which fixes 13 Critical and two Important rated bugs. The patch for Substance 3D Designer is on the larger side with seven fixes, but only two of those are Critical. On the other hand, the fix for Substance 3D Stager corrects five Critical-rated bugs that could lead to code execution. The Audition patch fixes six bugs, but only one is Critical.

The other patches are smaller in size. The fix for the Adobe DNG Software Development Kit (SDK) corrects two Critical and two Important-rated bugs. The InDesign patch fixes three bugs, but only one is Critical. The update for Adobe Bridge fixes two Critical bug that could lead to code execution. The patch for Lightroom Classic addresses a single Critical bug, and the release is wrapped up with a patch for Substance 3D Modeler that fixes a single, Important-rated memory link.

None of the bugs fixed by Adobe this month are listed as publicly known or under active attack at the time of release, and all of the updates released by Adobe this month are listed as deployment priority 3.

Microsoft Patches for February 2026

This month, Microsoft drops 58 new CVEs in Windows and Windows components, Office and Office Components, Azure, Microsoft Edge (Chromium-based), .NET and Visual Studio, GitHub Copilot, Mailslot FS, Exchange Server, Internet Explorer (!), Power BI, Hyper-V Server, and the Windows Subsystem for Linux. Counting the third-party and Chromium updates listed in the release, it brings the total number of CVEs to 62. One of the bugs in the Windows Graphics component was submitted through the ZDI program. Five of these bugs are rated Critical, two are rated Moderate, and the rest are rated Important in severity.

It’s typical to see this number of CVEs released in February, but the number of bugs under active attack is extraordinarily high. Microsoft lists six bugs being exploited at the time of release, with three of these listed as publicly known. Last month only had a single bug being exploited, although there were twice as many CVEs patched. We’ll see if we’re on our way to another “hot exploit summer” as we saw a few years ago or if this is just an aberration.

Let’s take a closer look at some of the more interesting updates for this month, starting with the bugs under active attack:

-    CVE-2026-21510 - Windows Shell Security Feature Bypass Vulnerability
This bug is listed as a security feature bypass, but it could also be classified as code execution. An attacker can bypass Windows SmartScreen and Windows Shell security prompts to execute code on a target system. This bug is also listed as publicly known, but Microsoft doesn’t say where. There is user interaction here, as the client needs to click a link or a shortcut file. Still, a one-click bug to gain code execution is a rarity. Definitely test and deploy this fix quickly.

-    CVE-2026-21514 - Microsoft Word Security Feature Bypass Vulnerability
This bug also requires user interaction in the form of opening a Word document, but that’s all that’s required to bypass protections to dangerous COM/OLE controls. Thankfully, the Preview Pane is not an attack vector here. However, users are well known to open lots of documents they receive in e-mail. This bypass could also result in code execution if the right COM/OLE control is hit. This is also listed as publicly known, so add this to the list to test and deploy quickly.

-    CVE-2026-21519 - Desktop Window Manager Elevation of Privilege Vulnerability
This is the second month in a row that a DWM was listed as being exploited in the wild. That leads me to believe the first patch didn’t completely resolve the vulnerability. Same as last month, this bug allows attackers to run code with SYSTEM privileges. Bugs of this type are typically paired with a code execution bug to take over a system. As always, Microsoft offers no indication of how widespread these exploits may be.

-    CVE-2026-21533 - Windows Remote Desktop Services Elevation of Privilege Vulnerability
Don’t let the word “Remote” in the title fool you – this is a local bug that allows attackers to run code with SYSTEM privileges. It’s interesting that Microsoft lists “Improper privilege management” as the root cause for this issue. If the system is running Remote Desktop Services, it’s probably a juicy target for attackers to move laterally after an initial breach. Add this one to the list of patches to test and deploy immediately.

-    CVE-2026-21513 - Internet Explorer Security Feature Bypass Vulnerability
Although long gone by many measurements, IE does still exist on Windows systems, and calling it always results in a vulnerability somehow. This bug manifests similarly to the Shell bug above, as it requires user interaction but could result in code execution. The bypass here is simply the ability to reach IE, which shouldn’t be possible. Again, test and deploy this fix quickly.

-    CVE-2026-21525 - Windows Remote Access Connection Manager Denial of Service Vulnerability
It’s unusual to see DoS bugs being used in active attacks, but that’s what we have here. A null pointer deref in the Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally. Most null pointer derefs cause the application or service to crash, but it’s not clear if it will automatically restart. I would exercise caution and patch quickly either way.

Here’s the full list of CVEs released by Microsoft for February 2026:

CVE Title Severity CVSS Public Exploited TYPE
CVE-2026-21514 Microsoft Word Security Feature Bypass Vulnerability Important 7.8 Yes Yes SFB
CVE-2026-21510 Windows Shell Security Feature Bypass Vulnerability Important 8.8 Yes Yes SFB
CVE-2026-21513 Internet Explorer Security Feature Bypass Vulnerability Important 8.8 Yes Yes SFB
CVE-2026-21519 Desktop Window Manager Elevation of Privilege Vulnerability Important 7.8 No Yes EoP
CVE-2026-21533 Windows Remote Desktop Services Elevation of Privilege Vulnerability Important 7.8 No Yes EoP
CVE-2026-21525 Windows Remote Access Connection Manager Denial of Service Vulnerability Moderate 6.2 No Yes DoS
CVE-2026-21511 Microsoft Outlook Spoofing Vulnerability Important 7.5 No No Spoofing
CVE-2023-2804 * Red Hat, Inc. CVE-2023-2804: Heap Based Overflow libjpeg-turbo Important 6.5 Yes No RCE
CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability Critical 8.6 No No EoP
CVE-2026-24300 Azure Front Door Elevation of Privilege Vulnerability Critical 9.8 No No EoP
CVE-2026-21532 Azure Function Information Disclosure Vulnerability Critical 8.2 No No Info
CVE-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability Critical 6.7 No No EoP
CVE-2026-23655 Microsoft ACI Confidential Containers Information Disclosure Vulnerability Critical 6.5 No No Info
CVE-2026-21218 .NET and Visual Studio Spoofing Vulnerability Important 7.5 No No Spoofing
CVE-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability Important 6.5 No No XSS
CVE-2026-21529 † Azure HDInsight Spoofing Vulnerability Important 5.7 No No Spoofing
CVE-2026-21528 Azure IoT Explorer Information Disclosure Vulnerability Important 6.5 No No Info
CVE-2026-21228 Azure Local Remote Code Execution Vulnerability Important 8.1 No No RCE
CVE-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability Important 9.8 No No RCE
CVE-2026-21251 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-20846 GDI+ Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-21523 GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-21518 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability Important 6.5 No No SFB
CVE-2026-21257 GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability Important 8 No No EoP
CVE-2026-21256 GitHub Copilot and Visual Studio Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-21516 GitHub Copilot for Jetbrains Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-21253 Mailslot File System Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-21537 † Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-21259 Microsoft Excel Elevation of Privilege Vulnerability Important 7.3 No No EoP
CVE-2026-21258 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-21261 Microsoft Excel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-21527 Microsoft Exchange Server Spoofing Vulnerability Important 6.5 No No Spoofing
CVE-2026-21260 Microsoft Outlook Spoofing Vulnerability Important 7.5 No No Spoofing
CVE-2026-21229 Power BI Remote Code Execution Vulnerability Important 8 No No RCE
CVE-2026-21236 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-21238 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-21241 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-21517 Windows App for Mac Installer Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-21234 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-21235 Windows Graphics Component Elevation of Privilege Vulnerability Important 7.3 No No EoP
CVE-2026-21246 Windows Graphics Component Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-21232 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-21240 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-21250 Windows HTTP.sys Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-21244 Windows Hyper-V Remote Code Execution Vulnerability Important 7.3 No No RCE
CVE-2026-21247 Windows Hyper-V Remote Code Execution Vulnerability Important 7.3 No No RCE
CVE-2026-21248 Windows Hyper-V Remote Code Execution Vulnerability Important 7.3 No No RCE
CVE-2026-21255 Windows Hyper-V Security Feature Bypass Vulnerability Important 8.8 No No SFB
CVE-2026-21231 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-21239 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-21245 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 No No EoP
CVE-2026-21222 Windows Kernel Information Disclosure Vulnerability Important 5.5 No No Info
CVE-2026-21243 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Important 7.5 No No DoS
CVE-2026-20841 Windows Notepad App Remote Code Execution Vulnerability Important 8.8 No No RCE
CVE-2026-21249 Windows NTLM Spoofing Vulnerability Important 3.3 No No Spoofing
CVE-2026-21508 Windows Storage Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-21237 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-21242 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7 No No EoP
CVE-2026-1861 * Chromium: CVE-2026-1861 Heap buffer overflow in libvpx High N/A No No RCE
CVE-2026-1862 * Chromium: CVE-2026-1862 Type Confusion in V8 High N/A No No RCE
CVE-2026-0391 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability Moderate 6.5 No No Spoofing

* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.

† Indicates further administrative actions are required to fully address the vulnerability.

 

Moving on to the Critical-rated bugs, the patch for Azure Front Door sounds frightening, but Microsoft has already fixed the bug and is just now documenting it. That’s also true for the bugs in Azure Arc and Azure Function. There are two Critical-rated bugs in the ACI Confidential Containers. The first allows a container escape while the second discloses secret tokens and keys. Either way, you’ll want to handle those quickly.

Taking a look at the other code execution vulnerabilities in this month’s release, we start with a frightening looking bug in Azure SDK for Python that has the highest CVSS this month of 9.8. A remote, unauthenticated attacker code gain code execution on an affected system via a maliciously crafted continuation token. It’s not clear why this isn’t rated Critical, but I would treat it as such. The three bugs in Hyper-V are actually local open-and-own bugs that require a user to open a malicious file on an affected system. That’s also true for the bug in Notepad. The bug in Power BI is confusing, because Microsoft says it requires authentication and could lead to an attacker running code as an authenticated user. There’s the poorly named “Azure Local Remote Code Execution Vulnerability”, but it requires a machine-in-the-middle (MitM) to exploit. The bug in Defender for Endpoint Linux is restricted to local subnets, but you’ll need to enable auto provisioning to get the patch. The final code execution bugs addressed this month are in GitHub Copilot. Two are command injections and the other is a Time-of-check time-of-use (toctou) race condition, but both could end up in code execution on affected systems.

Patches for Elevation of Privilege (EoP) bugs make up nearly 50% of this release, but most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges. There are only two of note. The first is a command injection bug in GitHub Copilot that leads to executing code at the level of the targeted application. The second is a bug in a kernel that leads to SYSTEM but could also be used for a sandbox escape.

There’s a unusually high number of spoofing bugs in this month’s release, and the ones for Outlook are the most troubling. First, the Preview Pane is an attack vector. Secondly, the bugs could be used to relay NTLM credentials via just an email, which could result in credential disclosure. And you’ll need multiple patches to fully address these bugs. At least they can be applied in any order.  There’s a UI misrepresentation bug in Exchange Server that could allow an attacker to either view some sensitive information or “make changes to disclosed information”. At what point does data become disclosed? That odd phrasing makes me think they are using AI to right some of their descriptions. The phrasing also appears in the patch for NTLM. That bug is triggered by opening a specially crafted Office doc, and while they explicitly say it could be used to relay NTLM creds, it sure seems that way. The patch for .NET and Visual Studio fixes a bug that allows attackers to bypass header validation, resulting in the service accepting a message it should reject. Finally, the bug in Azure HDInsight is really just a cross-site scripting (XSS) bug. The caveat here is that you need to restart Ambari server in both of the head nodes to have this fix updated. There is also an XSS in Azure Devops Server, but at least it is labelled as such.

There are a couple of additional security feature bypass bugs to discuss. The first is in Hyper-V and bypasses the Virtualization-based Security feature. The other is in GitHub Copilot and Visual Studio Code. It’s another command injection, but this one can be used to bypass authentication. Neat.

Looking at the remaining info disclosure bugs getting patched this month, most simply result in info leaks consisting of unspecified memory contents or memory addresses. The exception is the bug in Azure IoT Explorer. This bug could be used to view the contents of the target user’s local file system.

We end this month’s release with two DoS bugs: one in LDAP and one in GDI+. Neither descriptions from Microsoft provide any usable information.

No new advisories are being released this month.

Looking Ahead

I plan on being back home for the March release but wherever I’m at, you can rest assured that March 10, I’ll be here to provide my assessment of the release. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

  • ✇Zero Day Initiative - Blog
  • Pwn2Own Automotive 2026 - Day Three Results and the Master of Pwn Dustin Childs
    The last day of Pwn2Own Automotive 2026 saw the world’s top security researchers take their final shots at the latest automotive systems. Over three days of intense competition, $1,047,000 USD was awarded for 76 unique 0-day vulnerabilities, with bold exploits, clever techniques, and collisions keeping the action thrilling throughout.By the end, Tobias Scharnowski (@ScepticCtf), Felix Buchmann (@diff_fusion), and Kristian Covic (@SeTcbPrivilege) of Fuzzware.io claimed the title of Master of Pwn,
     
  • ↗️

Pwn2Own Automotive 2026 - Day Three Results and the Master of Pwn

✇Zero Day Initiative - Blog
Por:Dustin Childs
22 de Janeiro de 2026, 23:00

The last day of Pwn2Own Automotive 2026 saw the world’s top security researchers take their final shots at the latest automotive systems. Over three days of intense competition, $1,047,000 USD was awarded for 76 unique 0-day vulnerabilities, with bold exploits, clever techniques, and collisions keeping the action thrilling throughout.

By the end, Tobias Scharnowski (@ScepticCtf), Felix Buchmann (@diff_fusion), and Kristian Covic (@SeTcbPrivilege) of Fuzzware.io claimed the title of Master of Pwn, earning 28 points and $215,500 USD.

Follow the final updates on Twitter, Mastodon, LinkedIn, and Bluesky, and join the conversation using #Pwn2OwnAutomotive and #P2OAuto.

SUCCESS / COLLISON - Tobias Scharnowski (@ScepticCtf), Felix Buchmann (@diff_fusion), and Kristian Covic (@SeTcbPrivilege) of Fuzzware.io targeted the Alpine iLX-F511, demonstrating one vulnerability previously used by another contestant, earning $2,500 USD and 1 Master of Pwn point. #Pwn2Own #P2OAuto

SUCCESS / COLLISON - Slow Horses of Qrious Secure (@qriousec) targeted the Grizzl-E Smart 40A but encountered two bug collisions, still earning $5,000 USD and 2 Master of Pwn points.

SUCCESS / COLLISON - Team MST targeted the Kenwood DNR1007XR, demonstrating one bug but running into a collision, earning $2,500 USD and 1 Master of Pwn point.

SUCCESS - PetoWorks (@petoworks) targeted the Grizzl-E Smart 40A, exploiting one buffer overflow bug, and earned $10,000 USD and 4 Master of Pwn points.

SUCCESS - Bongeun Koo (@kiddo_pwn) and Evangelos Daravigkas (@freddo_1337) of Team DDOS targeted the Alpine iLX‑F511, exploiting a stack‑based buffer overflow to earn $5,000 USD and 2 Master of Pwn points.

SUCCESS - Viettel Cyber Security (@vcslab) targeted the Sony XAV‑9500ES, exploiting a heap‑based buffer overflow to achieve arbitrary code execution, earning $10,000 USD and 2 Master of Pwn points. #Pwn2Own #P2OAuto

SUCCESS / COLLISON - Qrious Secure (@qriousec) targeted the Kenwood system, demonstrating three bugs - one n-day and two unique vulnerabilities (incorrect permission assignment and a race condition), earning $4,000 USD and 1.75 Master of Pwn points.

SUCCESS - Boom! or shall we say Doom? Game On! Aapo Oksman, Elias Ikkelä-Koski and Mikael Kantola of Juurin Oy exploit the Alpitronic HYC50 with a TOCTOU bug - and installed a playable version of Doom to boot. They earn $20,000 and 4 Master of Pwn points. #Pwn2Own #P2OAuto

SUCCESS / COLLISON - Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) targeted the Kenwood DNR1007XR, demonstrating one bug but encountering a collision, earning $2,500 USD and 1 Master of Pwn point.

SUCCESS / COLLISON - Autocrypt (Hoyong Jin, Jaewoo Jeong, Chanhyeok Jung, Minsoo Son, and Kisang Choi) targeted the Alpine iLX-F511, demonstrating two vulnerabilities to gain root access. One collided with a previously known issue, earning $3,000 USD and 1.25 Master of Pwn points.

SUCCESS - Elias Ikkelä-Koski and Aapo Oksman of Juurin Oy targeted the Kenwood DNR1007XR, demonstrating a link-following vulnerability to earn $5,000 USD and 2 Master of Pwn points.

SUCCESS - Nam Ha Bach and Vu Tien Hoa of the FPT NightWolf Team targeted the Alpine iLX-F511, exploiting one unique vulnerability to gain root access and earning $5,000 USD and 2 Master of Pwn points.

SUCCESS / COLLISON - Ryo Kato (@Pwn4S0n1c) targeted the Autel MaxiCharger AC Elite Home 40A, demonstrating a three-bug chain but encountering one collision, still earning $16,750 USD and 3.5 Master of Pwn points.

  • ✇Zero Day Initiative - Blog
  • Pwn2Own Automotive 2026 - Day Two Results Dustin Childs
    Day Two of Pwn2Own Automotive 2026 was packed with action, and the stakes continued to rise. Security researchers returned to the Pwn2Own stage, probing and challenging the latest automotive systems as the competition intensified. New exploits, unexpected twists, and standout performances emerged throughout the day - follow along here for daily updates as the race for Master of Pwn heats up. Following an action-packed Day One, where $516,500 USD was awarded for 37 unique 0-day vulnerabilities, D
     
  • ↗️

Pwn2Own Automotive 2026 - Day Two Results

✇Zero Day Initiative - Blog
Por:Dustin Childs
22 de Janeiro de 2026, 01:58

Day Two of Pwn2Own Automotive 2026 was packed with action, and the stakes continued to rise. Security researchers returned to the Pwn2Own stage, probing and challenging the latest automotive systems as the competition intensified. New exploits, unexpected twists, and standout performances emerged throughout the day - follow along here for daily updates as the race for Master of Pwn heats up. 

Following an action-packed Day One, where $516,500 USD was awarded for 37 unique 0-day vulnerabilities, Day Two added another $439,250 USD and 29 unique 0-days, bringing the event totals to $955,750 USD with 66 unique vulnerabilities overall. Fuzzware.io holds a commanding lead for Master of Pwn, but with one day to go, anything can still happen. We’ll see what the final day of the contest brings. 

Stay up to date throughout Day Two by following us on Twitter, Mastodon, LinkedIn, and Bluesky, and join the conversation using #Pwn2Own Automotive and #P2OAuto. 

SUCCESS - Inhyung Lee, Seokhun Lee, Chulhan Park, Wooseok Kim, and Yeonseok Jang of Team MAMMOTH exploited a command injection vulnerability against the Alpine iLX-F511, earning $10,000 USD and 2 Master of Pwn points.

FAILURE - Autocrypt - Hoyong Jin, Jaewoo Jeong, Chanhyeok Jung, Minsoo Son, and Kisang Choi - targeted the Grizzl‑E Smart 40A with the Charging Connector Protocol/Signal Manipulation add‑on but were unable to demonstrate the vulnerability within the allotted time.

SUCCESS - Julien COHEN‑SCALI of FuzzingLabs (@FuzzingLabs) targeted the Phoenix Contact CHARX SEC‑3150, chaining two vulnerabilities - an authentication bypass and privilege escalation - to earn $20,000 USD and 4 Master of Pwn points.

SUCCESS - Neodyme AG (@Neodyme) exploited a buffer overflow vulnerability (CWE‑120) in Round 3 to achieve privileged code execution on the Sony XAV‑9500ES, earning $10,000 USD and 2 Master of Pwn points. #Pwn2Own #P2OAuto

SUCCESS - Hank Chen (@hank0438) of InnoEdge Labs exploited an exposed dangerous method against the Alpitronic HYC50 – Lab Mode, earning $40,000 USD and 4 Master of Pwn points.

SUCCESS / COLLISON - Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) targeted the Alpine iLX-F511, hitting a one-vulnerability collision with a previous attempt and earning $2,500 USD and 1 Master of Pwn point.

SUCCESS / COLLISON - BoredPentester (@BoredPentester) targeted the Grizzl‑E Smart 40A with the Charging Connector Protocol/Signal Manipulation add‑on, combining two bugs to earn $20,000 USD and 3 Master of Pwn points. #Pwn2Own #P2OAuto

SUCCESS / COLLISON - Bongeun Koo (@kiddo_pwn) and Evangelos Daravigkas (@freddo_1337) of Team DDOS targeted the Kenwood DNR1007XR, exploiting an n‑day command injection to earn $4,000 USD and 1 Master of Pwn point.

SUCCESS - Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) targeted the Kenwood DNR1007XR in Round 6, exploiting a command injection vulnerability to earn $5,000 USD and 2 Master of Pwn points.

SUCCESS / COLLISON - Kazuki Furukawa (@N4NU) of GMO Cybersecurity by Ierae targeted the Alpine iLX-F511, hitting a one-vulnerability collision with a previous attempt and earning $2,500 USD and 1 Master of Pwn point. #Pwn2Own #P2OAuto

SUCCESS / COLLISON - Donggeon Kim (@gbdngb12), Hoon Nam (@pwnstar96), Jaeho Jeong (@jeongZero), Sangsoo Jeong (@sangs00Jeong), and Wonyoung Jung (@nonetype_pwn) of 78ResearchLab targeted the Kenwood DNR1007XR, exploiting one n-day vulnerability along with two collisions to earn $2,500 USD and 1 Master of Pwn point.

SUCCESS - Xilokar (xilokar@mamot.fr) targeted the Alpitronic HYC50 – Lab Mode, exploiting one bug to earn $20,000 USD and 4 Master of Pwn points.

SUCCESS / COLLISON - Hyeongseok Lee (@fluorite_pwn), Yunje Shin (@YunjeShin), Chaeeul Hyun (@yskm_Gunter), Ingyu Yang (@Mafty5275), Hoseok Kang (@cl4y419), Seungyeon Park (@vvsy46), and Wonjun Choi (@won6_choi) of BoB::Takedown targeted the Grizzl-E Smart 40A, hitting one collision and one unique 0-day, earning $15,000 USD and 3 Master of Pwn points.

SUCCESS - Tobias Scharnowski (@ScepticCtf), Felix Buchmann (@diff_fusion), and Kristian Covic (@SeTcbPrivilege) of Fuzzware.io targeted the Phoenix Contact CHARX SEC-3150 in Round 5, exploiting three bugs with two add-ons to earn $50,000 USD and 7 Master of Pwn points.

SUCCESS / COLLISON - Slow Horses of Qrious Secure (@qriousec) targeted the Alpine iLX-F511, resulting in a single vulnerability collision with a previous attempt, earning $2,500 USD and 1 Master of Pwn point.

FAILURE - Autocrypt (Hoyong Jin, Jaewoo Jeong, Chanhyeok Jung, Minsoo Son, and Kisang Choi) targeted the Autel MaxiCharger AC Elite Home 40A with the Charging Connector Protocol/Signal Manipulation add-on, but ran out of attempts before the exploit could be demonstrated.

SUCCESS - BoredPentester (@BoredPentester) targeted the Kenwood DNR1007XR, demonstrating a command injection vulnerability to earn $5,000 USD and 2 Master of Pwn points.

SUCCESS - Rob Blakely of Technical Debt Collectors targeted Automotive Grade Linux, chaining three bugs - an out-of-bounds read, memory exhaustion, and a heap overflow - to earn $40,000 USD and 4 Master of Pwnpoints. #Pwn2Own #P2OAuto

SUCCESS / COLLISON - PHP Hooligans / Midnight Blue (@midnightbluelab) targeted the Autel MaxiCharger AC Elite Home 40A with the Charging Connector Protocol/Signal Manipulation add-on, hitting a full collision on a two-bug chain, earning $20,000 USD and 3 Master of Pwn points. #Pwn2Own #P2OAuto

SUCCESS - Synacktiv (@synacktiv) targeted the Autel MaxiCharger AC Elite Home 40A with the Charging Connector Protocol/Signal Manipulation add‑on. In Round 2, they exploited one stack‑based buffer overflow, earning $30,000 USD and 5 Master of Pwn points.

SUCCESS - Tobias Scharnowski (@ScepticCtf), Felix Buchmann (@diff_fusion), and Kristian Covic (@SeTcbPrivilege) of Fuzzware.io targeted the ChargePoint Home Flex (CPH50-K) with the Charging Connector Protocol/Signal Manipulation add-on, exploiting one command injection bug to earn $30,000 USD and 5 Master of Pwn points. #Pwn2Own #P2OAuto

FAILURE - PetoWorks (@petoworks) targeted the Alpine iLX-F511 but was unable to demonstrate their exploit within the allotted time.

SUCCESS - Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) targeted the ChargePoint Home Flex (CPH50-K) with the Charging Connector Protocol/Signal Manipulation add-on, exploiting two bugs to earn $30,000 USD and 5 Master of Pwn points.

SUCCESS / COLLISON - PetoWorks (@petoworks) targeted the Kenwood DNR1007XR, hitting one bug collision earning $2,500 USD and 1 Master of Pwn point.

SUCCESS / COLLISON - Tobias Scharnowski (@ScepticCtf), Felix Buchmann (@diff_fusion), and Kristian Covic (@SeTcbPrivilege) of Fuzzware.io targeted the Grizzl-E Smart 40A with the Charging Connector Protocol/Signal Manipulation add-on, resulting in two bug collisions and earning $15,000 USD and 3 Master of Pwn points.

SUCCESS / COLLISON - Bongeun Koo (@kiddo_pwn) and Evangelos Daravigkas (@freddo_1337) of Team DDOS targeted the Phoenix Contact CHARX SEC-3150 with the Charging Connector Protocol/Signal Manipulation add-on, demonstrating six bugs but encountering a collision, still earning $19,250 USD and 4.75 Master of Pwn points.

SUCCESS - Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) targeted the Alpine iLX-F511, exploiting two unique vulnerabilities to gain root access, earning $5,000 USD and 2 Master of Pwn points.

SUCCESS / COLLISON - Evan Grant (@stargravy) targeted the Grizzl-E Smart 40A with the Charging Connector Protocol/Signal Manipulation add-on, hitting two bug collisions, still earning $15,000 USD and 3 Master of Pwn points.

SUCCESS / COLLISON - Hyeonjun Lee (@gul9ul), Younghun Kwon (@d0kk2bi), Hyeokjong Yun (@dig06161), Dohwan Kim (@neko__hat), Hanryeol Park (@hanR0724), Hyojin Lee (@meixploit), Jinyeong Yoon, and Youngmin Cho (@ZIEN0621) of ZIEN, Inc. targeted the ChargePoint Home Flex (CPH50-K), demonstrating two unique bugs (symlink following and command injection) but encountered a collision with a previous attempt - still earning $16,750 USD and 3.5 Master of Pwn points.

SUCCESS / COLLISON - Hyeongseok Lee (@fluorite_pwn), Yunje Shin (@YunjeShin), Chaeeul Hyun (@yskm_Gunter), Ingyu Yang (@Mafty5275), Hoseok Kang (@cl4y419), Seungyeon Park (@vvsy46), and Wonjun Choi (@won6_choi) of BoB::Takedown targeted the Phoenix Contact CHARX SEC-3150, demonstrating three bugs, but ran into two collisions, earning $6,750 USD and 2.75 Master of Pwn points.

  • ✇Zero Day Initiative - Blog
  • Pwn2Own Automotive 2026 - Day One Results Dustin Childs
    Welcome to Day One of Pwn2Own Automotive 2026! Today, 30 entries took the Pwn2Own stage to target the latest automotive systems, as the world’s top security researchers push technology to its limits. Exploits, surprises, and breakthrough discoveries are unfolding. After Day One, we awarded $516,500 for 37 unique 0-days! Fuzzware.io is currently in the lead for Master of Pwn, but Team DDOS is right on their heels. Stay tuned tomorrow for more results and surprises. Stay up to date by following u
     
  • ↗️

Pwn2Own Automotive 2026 - Day One Results

✇Zero Day Initiative - Blog
Por:Dustin Childs
21 de Janeiro de 2026, 01:03

Welcome to Day One of Pwn2Own Automotive 2026! Today, 30 entries took the Pwn2Own stage to target the latest automotive systems, as the world’s top security researchers push technology to its limits. Exploits, surprises, and breakthrough discoveries are unfolding.

After Day One, we awarded $516,500 for 37 unique 0-days! Fuzzware.io is currently in the lead for Master of Pwn, but Team DDOS is right on their heels. Stay tuned tomorrow for more results and surprises.

Stay up to date by following us on Twitter, Mastodon, LinkedIn, and Bluesky, and join the conversation using #Pwn2Own Automotive and #P2OAuto for continuous coverage. 

FAILURE - Unfortunately, Team Hacking Group targeting Kenwood DNR1007XR in the In-Vehicle Infotainment (IVI) category could not get their exploit working within the time allotted.

SUCCESS - Neodyme AG (@Neodyme) used a stack based buffer overflow to get a root shell on the Alpine iLX-F511, earning $20,000 USD and 2 Master of Pwn points.

SUCCESS - Fuzzware.io ( @ScepticCtf, @diff_fusion, @SeTcbPrivilege) chained two vulnerabilities (CWE-306, CWE-347) to achieve code execution on the Autel charger and manipulate the charging signal, earning $50,000 USD and 5 Master of Pwn points. Full win with the add-on.

SUCCESS - Taejin Kim (@tae3pwn), Junsu Yeo (@junactually), Sunmin Park (@sunminpark4503), Sungmin Son (@_ssm98), and Hoseok Lee of SKShieldus (@EQSTLab) of 299 exploited a hardcoded credential (CWE-798) to achieve code execution via CWE-494 on the Grizzl-E Smart 40A, earning $40,000 USD and 4 Master of Pwn points.

SUCCESS - Bongeun Koo (@kiddo_pwn) and Evangelos Daravigkas (@freddo_1337) of Team DDOS exploited two bugs, including a command injection, against the ChargePoint Home Flex. Add-on failed, but still earned $40,000 USD and 4 Master of Pwn points.

SUCCESS - Cyrill Bannwart, Emanuele Barbeno, Yves Bieri, Lukasz D., and Urs Mueller of Compass Security (@compasssecurity) exploited one exposed dangerous method/function bug on the Alpine iLX-F511, winning Round 2 for $10,000 USD and 2 Master of Pwn points.

SUCCESS - PetoWorks (@petoworks) chained three bugs - including Denial of Service (DoS), a race condition, and command injection - against the Phoenix Contact CHARX SEC-3150, winning Round 1 for $50,000 USD and 5 Master of Pwn points with the signal manipulation add-on.

SUCCESS - Synacktiv (@synacktiv) chained three vulnerabilities to gain root-level code execution on the Sony XAV-9500ES, earning a full win of $20,000 USD and 2 Master of Pwn points.

SUCCESS - Tobias Scharnowski (@ScepticCtf), Felix Buchmann (@diff_fusion), and Kristian Covic (@SeTcbPrivilege) of Fuzzware.io exploited an n-day command injection against Kenwood, earning $8,000 USD and 1 Master of Pwn point.

SUCCESS - Yannik Marchand (@kinnay) exploited a single out-of-bounds write to achieve a full win against the Kenwood DNR1007XR, earning $20,000 USD and 2 Master of Pwn points.

FAILURE - Hyunseok Yun, Heaeun Moon, and Eungyo Seo of CIS targeted the Alpine iLX-F511 but were unable to complete their exploit within the allotted time.

SUCCESS / COLLISON - Cyrill Bannwart, Emanuele Barbeno, Yves Bieri, Lukasz D., and Urs Mueller of Compass Security (@compasssecurity) earned $25,000 USD and 4 Master of Pwn points with the Charging Connector Protocol/Signal Manipulation add‑on against the Grizzl‑E Smart 40A, chaining an authentication bypass (CWE‑306) to remote code execution via CWE‑494.

FAILURE - Tobias Scharnowski (@ScepticCtf), Felix Buchmann (@diff_fusion), and Kristian Covic (@SeTcbPrivilege) of Fuzzware.io targeted the EMPORIA Pro Charger Level 2 with the Charging Connector Protocol/Signal Manipulation add‑on but were unable to complete their exploit within the allotted time.

SUCCESS / COLLISON - Kazuki Furukawa (@N4NU) of GMO Cybersecurity chained three bugs against Kenwood - including an n‑day hard‑coded credential, incorrect permissions on a critical resource, and command injection - to earn $8,000 USD and 1.75 Master of Pwn points.

SUCCESS / COLLISON - Bongeun Koo (@kiddo_pwn) and Evangelos Daravigkas (@freddo_1337) of Team DDOS targeted the Autel MaxiCharger AC Elite Home 40A with the Charging Connector Protocol/Signal Manipulation add-on. Due to a full collision with a previous attempt, they earned $10,000 USD and 2 Master of Pwn points.

SUCCESS / COLLISON - Chumy Tsai (@rm_rf_chumy), Jimmy Liu (@DrmnSamoLiu), and Jim Chen (@asef18766) of Cycraft Technology (@cycraft_corp) targeted the Grizzl-E Smart 40A. Due to a 2-bug collision, they earned $10,000 USD and 2 Master of Pwn points.

SUCCESS - Mia Miku Deutsch (@newbe3e) exploited a stack-based buffer overflow against the Alpine iLX‑F511, earning $10,000 USD and 2 Master of Pwn points.

SUCCESS - Synacktiv (@synacktiv) chained two vulnerabilities - an information leak and an out‑of‑bounds write - to achieve a full win in the Tesla Infotainment USB‑based Attack category, earning $35,000 USD and 3.5 Master of Pwn points.

SUCCESS / COLLISON - Donggeon Kim (@gbdngb12), Hoon Nam (@pwnstar96), Jaeho Jeong (@jeongZero), Sangsoo Jeong (@sangs00Jeong), and Wonyoung Jung (@nonetype_pwn) of 78ResearchLab hit a one‑vulnerability collision against the Alpine iLX‑F511, earning $5,000 USD and 1 Master of Pwn point.

SUCCESS - Giuseppe Calì (_gcali) and 8cf53a459714977f6bb11ee2d90416bf1675fa0e2451d80cf55a06d0b6ac2 of Team Zeroshi exploited five bugs against the Phoenix Contact CHARX SEC-3150, securing a Round 2 win for $20,000 USD and 4 Master of Pwn points.

SUCCESS / COLLISON - Bongeun Koo (@kiddo_pwn) and Evangelos Daravigkas (@freddo_1337) of Team DDOS hit a collision against the Grizzl-E Smart 40A with the Charging Connector Protocol/Signal Manipulation add-on, combining three duplicate bugs and one new bug to earn $22,500 USD and 3.5 Master of Pwn points.

FAILURE - Tobias Scharnowski (@ScepticCtf), Felix Buchmann (@diff_fusion), and Kristian Covic (@SeTcbPrivilege) of Fuzzware.io targeted Sony XAV-9500ES but were unable to get their exploit working within the allotted time.

FAILURE - Viettel Cyber Security (@vcslab) targeted the ChargePoint Home Flex (CPH50-K) but were unable to get their exploit working within the allotted time.

SUCCESS - Tobias Scharnowski (@ScepticCtf), Felix Buchmann (@diff_fusion), and Kristian Covic (@SeTcbPrivilege) of Fuzzware.io achieved a full win against the Alpitronic HYC50 - Field Mode, exploiting a single out-of-bounds write to earn $60,000 USD and 6 Master of Pwn points.

SUCCESS - Dong hee Kim (@heehee_0219_) and Jong geon Kim (@kimjor22) of Team K exploited two vulnerabilities - an out-of-bounds read and a stack-based buffer overflow - against the Alpine iLX-F511, earning $10,000 USD and 2 Master of Pwn points.

SUCCESS - Interrupt Labs (@InterruptLabs) scored a Round 3 win against the Kenwood DNR1007XR, exploiting a unique heap-based buffer overflow to earn $10,000 USD and 2 Master of Pwn points. #Pwn2Own #P2OAuto

FAILURE - Jonathan Conrad (@jwconrad.bsky.social) targeted the Grizzl-E Smart 40A but was unable to reproduce the vulnerability within the allotted time.

SUCCESS / COLLISON - TienPP of FPT NightWolf hit a collision against the Kenwood DNR1007XR, chaining three bugs - including an n‑day hard‑coded credential and two 0‑days (incorrect default permissions and symlink following) - to earn $8,000 USD and 1.75 Master of Pwn points.

SUCCESS - @ExLuck99 and @gr4ss341 of ANHTUD chained two vulnerabilities (CWE‑125 and CWE‑122) to achieve code execution on the Sony XAV‑9500ES, earning $10,000 USD and 2 Master of Pwn points in Round 2.

SUCCESS / COLLISON - Donggeon Kim (@gbdngb12), Hoon Nam (@pwnstar96), Jaeho Jeong (@jeongZero), Sangsoo Jeong (@sangs00Jeong), and Wonyoung Jung (@nonetype_pwn) of 78ResearchLab targeted the Phoenix Contact CHARX SEC‑3150, chaining four bugs (two unique and two collisions) to earn $15,000 USD and 3 Master of Pwn points.

❌
❌