Latest Microsoft CVEs
Every organization faces unique cybersecurity challenges, but successful outcomes require more than technology alone. Our case studies highlight how Gilliam Security works alongside executives, security leaders, and stakeholders to build practical security programs, strengthen governance, manage risk, and achieve critical compliance objectives in complex business environments.From guiding organizations through leadership transitions and regulatory audits to establishing governance functions for global enterprises and preparing government contractors for CMMC requirements, these engagements demonstrate our commitment to delivering measurable results, sustainable security practices, and long-term business value.
Provided below are the Microsoft CVEs from the last 30 days:
CVE-2026-96913 Windows Kernel Elevation of Privilege Vulnerability Published on: October 20, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70074 Windows DNS Information Disclosure Vulnerability Published on: October 20, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-83839 Windows Hyper-V Elevation of Privilege Vulnerability Published on: October 20, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability Published on: October 20, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-102204 Windows Subsystem for Linux Elevation of Privilege Vulnerability Published on: October 20, 2026 Updated CVE to relect that this vulnerability is in the Windows Subsystem for Linux product. Microsoft recommends that customer using this product should install the latest version to be protected. Read Details
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability Published on: October 20, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability Published on: October 20, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability Published on: October 19, 2026 Updated the Security Updates table to list Microsoft Identity Web v3 and v4 separately and clarify the affected version ranges. The existing security updates are versions 3.16.0 and 4.16.1, respectively. This is an informational change only. Read Details
CVE-2026-70197 .NET Remote Code Execution Vulnerability Published on: October 19, 2026 Microsoft is aware that the vulnerability for which this CVE was assigned has not been addressed. We are working to prepare and test a complete mitigation. We will update this document when there is more information. Read Details
Chromium CVE-2026-106258: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106263: Improper input validation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106264: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106268: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106270: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106271: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106273: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106274: Incorrect reference resolution Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106276: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106278: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability Published on: October 16, 2026 Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-108465 Windows Update Delivery Optimization Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-83831 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Published on: October 16, 2026 <p>Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85890 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Published on: October 16, 2026 <p>Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85897 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Published on: October 16, 2026 <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85898 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Published on: October 16, 2026 <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96198 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Published on: October 16, 2026 <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96199 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Published on: October 16, 2026 <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> Read Details
Chromium CVE-2026-106287: Information loss Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106288: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106289: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106291: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106292: Buffer overflow Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106412: Race condition Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106293: Type confusion Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106413: Race condition Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106294: Incomplete cleanup Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106415: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106295: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106416: Code injection Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106297: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106417: Integer overflow Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106299: Improper input validation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106418: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106300: Race condition Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106420: Incorrect calculation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106301: Confused deputy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106421: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106302: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106422: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106303: Observable discrepancy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106423: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106304: Out of bounds read Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106424: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106306: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106425: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106307: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106426: Race condition Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106308: Incorrect reference resolution Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106309: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106310: Use of released resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106311: Clickjacking Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106312: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106314: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106315: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106316: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106318: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106321: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106322: Open redirect Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106324: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106325: Incorrect reference resolution Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106327: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106328: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106329: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110136: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106330: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106331: Improper input validation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106332: Integer overflow Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110137: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106333: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110138: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110139: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110140: Type confusion Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106334: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110141: Observable discrepancy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106335: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110142: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106336: Observable discrepancy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110143: Use of uninitialized variable Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106338: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110144: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106339: Use of released resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110145: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110146: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106340: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110147: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106341: Type confusion Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110148: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106342: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110149: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106343: Improper state validation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110150: Privilege elevation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106344: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110151: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106345: Use of released resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110152: Buffer overflow Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106346: Improper state validation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110153: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106347: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110154: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106348: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110155: Buffer overflow Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106349: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110156: Incorrect reference resolution Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106350: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110157: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106351: Observable discrepancy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110159: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106352: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110160: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106354: Improper resource exposure Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110161: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106355: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110162: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110163: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110164: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106356: Clickjacking Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110165: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110166: Buffer overflow Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106357: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106358: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110167: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106359: Confused deputy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110168: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106360: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110169: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106362: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110170: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106363: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110171: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106364: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-110172: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106365: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106369: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106370: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106371: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106373: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106374: Type confusion Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106375: Incomplete cleanup Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106376: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106377: Race condition Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106378: Privilege elevation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106379: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106381: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106382: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106383: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106384: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106385: Race condition Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106386: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106388: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106389: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106390: Incorrect provision of specified functionality Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106391: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106392: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106393: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106394: Incomplete cleanup Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106396: Improper input validation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106398: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106399: Out of bounds read Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106401: Out of bounds write Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106402: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106403: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106404: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106407: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106409: Incorrect reference resolution Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106410: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106411: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-102322: Incorrect Authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106179: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106180: Observable discrepancy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106181: Incorrect reference resolution Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106182: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106183: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106184: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106185: Improper input validation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106186: Uncontrolled search path element Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106187: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106188: Confused deputy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106189: Code injection Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106190: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106191: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106193: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106194: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106195: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106196: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106197: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106198: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106199: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106200: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106201: Race condition Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106202: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106203: Incomplete cleanup Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106204: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106205: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106207: Race condition Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106208: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106210: Observable discrepancy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106211: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106212: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106213: Race condition Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106214: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106215: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106216: Cross-site request forgery Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106217: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106220: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106222: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106224: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106225: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106226: Improper input validation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106227: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106228: Confused deputy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106229: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106230: Incorrect reference resolution Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106231: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106232: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106233: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106234: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106235: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106236: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106237: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106238: Race condition Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106239: Integer overflow Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106241: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106240: Type confusion Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106248: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106246: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106247: Buffer overflow Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106243: Incomplete cleanup Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106242: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106244: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106245: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106249: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
CVE-2026-109468 ASP.NET Core Denial of Service Vulnerability Published on: October 16, 2026 Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70056 Windows Update Service Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-83518 RPC Runtime Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-83654 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-83708 Windows Installer Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-85377 Windows CD-ROM Driver Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-85790 Microsoft QUIC Information Disclosure Vulnerability Published on: October 16, 2026 Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-85806 Network Policy Server (NPS) Remote Code Execution Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-85822 Windows exFAT File System Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70170 Windows Kernel Denial of Service Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70213 Microsoft Power Apps Remote Code Execution Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-87716 Windows Storage Spaces Controller Denial of Service Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70031 Windows iSCSI Denial of Service Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70013 Windows iSCSI Remote Code Execution Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70186 ASP.NET Core Denial of Service Vulnerability Published on: October 16, 2026 Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70181 ASP.NET Core Denial of Service Vulnerability Published on: October 16, 2026 Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70197 .NET Remote Code Execution Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-96222 Active Directory Federation Services (AD FS) Spoofing Vulnerability Published on: October 16, 2026 Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-97776 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-96044 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 16, 2026 CWE added. Informational change only. Read Details
CVE-2026-96237 .NET Remote Code Execution Vulnerability Published on: October 16, 2026 Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96202 Windows Raw Image Extension Remote Code Execution Vulnerability Published on: October 16, 2026 <p>Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97777 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-105008 Windows Schannel Spoofing Vulnerability Published on: October 16, 2026 CWE added. Informational change only. Read Details
CVE-2026-70162 .NET Denial of Service Vulnerability Published on: October 16, 2026 Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-108131 Active Directory Federation Services (AD FS) Spoofing Vulnerability Published on: October 16, 2026 CWE added. Informational change only. Read Details
CVE-2026-108471 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Published on: October 16, 2026 CWE added. Informational change only. Read Details
Chromium CVE-2026-106250: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106251: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106252: Incorrect comparison Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106257: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106265: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106266: Confused deputy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106267: Missing authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106269: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106275: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106277: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106279: Incorrect reference resolution Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106280: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106281: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106283: Use after free Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106284: Out of bounds read Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106285: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106286: Confused deputy Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106253: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106255: Race condition Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106256: Information leak Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106259: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106260: Incorrect authorization Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106261: Uninitialized resource Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106262: Incomplete cleanup Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-106272: UI misrepresentation Published on: October 16, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
CVE-2026-109461 Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability Published on: October 16, 2026 Corrected fix build number. Informational change only. Read Details
CVE-2026-71339 Windows Installer Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69283 Windows CD-ROM Driver Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70583 Windows Core Messaging Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-81396 Microsoft Excel Remote Code Execution Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-68798 Microsoft Excel Remote Code Execution Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability Published on: October 16, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-102858 Microsoft Office OneNote Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-105599 Microsoft Office PowerPoint Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-105715 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-105718 Microsoft Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-108426 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108427 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108428 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108429 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108430 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108431 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108432 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108433 Microsoft Office Word Security Feature Bypass Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108434 Microsoft Office Word Information Disclosure Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108435 Microsoft Office Word Information Disclosure Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108436 Microsoft Office Word Information Disclosure Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108437 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108438 Microsoft Office Word Information Disclosure Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108439 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108440 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108441 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108442 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108443 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108444 Microsoft Office Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108445 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108446 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108447 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108448 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108449 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108450 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108451 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108452 Microsoft Office SharePoint Remote Code Execution Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108453 Microsoft Office PowerPoint Information Disclosure Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108454 Microsoft Office PowerPoint Information Disclosure Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-108455 Microsoft Office PowerPoint Information Disclosure Vulnerability Published on: October 15, 2026 Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action. Read Details
CVE-2026-109468 ASP.NET Core Denial of Service Vulnerability Published on: October 15, 2026 <p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-66822 .NET Information Disclosure Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-69651 .NET Denial of Service Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-85790 Microsoft QUIC Information Disclosure Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-87697 .NET Remote Code Execution Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70174 .NET Remote Code Execution Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70159 ASP.NET Core Denial of Service Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70161 .NET Elevation of Privilege Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70165 .NET Elevation of Privilege Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70179 ASP.NET Core Elevation of Privilege Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70190 .NET Elevation of Privilege Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70188 ASP.NET Core Security Feature Bypass Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for ASP.NET Core 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70197 .NET Remote Code Execution Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70268 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70220 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70206 Microsoft Office Word Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70269 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70263 Microsoft Office Word Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70287 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70291 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70302 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70301 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-83891 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88150 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88145 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88156 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88175 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88167 Microsoft Office Word Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88169 Microsoft Office Word Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88178 Microsoft Office PowerPoint Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88197 Microsoft Office Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88196 Microsoft Office Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88202 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-96224 .NET Remote Code Execution Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96236 ASP.NET Core Denial of Service Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for ASP.NET Core 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96995 Microsoft Office Word Elevation of Privilege Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97005 Microsoft Office PowerPoint Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97001 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97744 Microsoft Office PowerPoint Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-96997 Microsoft Office OneNote Elevation of Privilege Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97750 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97753 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97017 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97740 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97766 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97003 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97751 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97776 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97752 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97758 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97754 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97761 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97747 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97780 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97767 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97770 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97771 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97755 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97765 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97739 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97778 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97759 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-77902 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70254 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70281 Microsoft Office Outlook Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70215 Microsoft Office PowerPoint Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88144 Microsoft Office PowerPoint Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88184 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88185 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88186 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88183 Microsoft Office PowerPoint Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88192 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88210 Microsoft Office Word Security Feature Bypass Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-88207 Microsoft Office PowerPoint Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-70007 .NET Framework Remote Code Execution Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-84008 .NET Denial of Service Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-85363 .NET Framework Elevation of Privilege Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96231 .NET Elevation of Privilege Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96225 .NET Elevation of Privilege Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96233 ASP.NET Core Denial of Service Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96232 .NET Information Disclosure Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96234 .NET Information Disclosure Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96235 .NET Remote Code Execution Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96238 .NET Security Feature Bypass Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96957 .NET Security Feature Bypass Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96958 .NET Denial of Service Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-96959 .NET Denial of Service Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-97748 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97007 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97779 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97756 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97008 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97769 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97773 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97010 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97743 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97777 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97762 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97011 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97757 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97738 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97742 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97760 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97746 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97004 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97741 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97763 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97775 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97772 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97768 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-97745 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-100211 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-100209 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-100210 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-100212 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 15, 2026 Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links. Read Details
CVE-2026-58280 .NET Denial of Service Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-70162 .NET Denial of Service Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-92707 MessagePack-CSharp Denial of Service Vulnerability Published on: October 15, 2026 Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged. Read Details
CVE-2026-109461 Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability Published on: October 15, 2026 <p>Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability Published on: October 15, 2026 <p>Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 15, 2026 Updated product information in the Software Update table. This is an informational change only. Read Details
CVE-2026-69366 Windows Kernel Elevation of Privilege Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69676 Windows Kerberos Remote Code Execution Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70584 Windows Core Messaging Elevation of Privilege Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-77499 Windows DHCP Server Denial of Service Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-72937 Windows Storage Port Driver Information Disclosure Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62697 Windows Push Notifications Elevation of Privilege Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69351 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69620 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69334 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-81352 Web Media Extensions Remote Code Execution Vulnerability Published on: October 14, 2026 Updated product information in the Software Update table. This is an informational change only. Read Details
CVE-2026-32176 SQL Server Elevation of Privilege Vulnerability Published on: October 14, 2026 Added SQL software to the Security Updates table. Customers that are running supported version of SQL are encouraged to update to the indicated version to be protected from this vulnerability. Read Details
CVE-2026-105723 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70095 Windows iSCSI Remote Code Execution Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70245 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-84019 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-85868 Windows Common Log File System Driver Elevation of Privilege Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-85870 Windows Common Log File System Driver Elevation of Privilege Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-102188 Windows Storage Port Driver Elevation of Privilege Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-83943 Azure API Center Information Disclosure Vulnerability Published on: October 14, 2026 CWE added. Informational change only. Read Details
CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62755 Windows DHCP Client Elevation of Privilege Vulnerability Published on: October 14, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-102849 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-102850 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.</p> Read Details
ADV260001 ADV260001 Hardening changes for ReFS volumes on removable media Published on: October 13, 2026 Starting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the [Resilient File System (ReFS)](https://learn.microsoft.com/windows-server/storage/refs/refs-overview). This change is not enable by default until 2027. Please see [Hardening changes for ReFS volumes on removable media](https://support.microsoft.com/en-us/servicing/os/windows/docs/2026/10/hardening-changes-for-refs-volumes-on-removable-media) for more information. Read Details
CVE-2026-105725 Windows Security App Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-105727 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-105728 Dynamics Business Central Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-108400 HEVC Video Extensions Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-108457 Microsoft Windows PDF Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-108468 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102227 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-102229 Visual Studio Code Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-102231 Visual Studio Code Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-102232 Visual Studio Code Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-102233 Visual Studio Code Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-102234 Visual Studio Code Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-102235 Visual Studio Code Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-102238 Visual Studio Code Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70098 Visual Studio Code Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96956 SQL Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-102855 Microsoft Office Visio Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-102856 Microsoft Office Visio Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-102857 Microsoft Office Visio Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-102858 Microsoft Office OneNote Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-102859 Microsoft Office SharePoint Spoofing Vulnerability Published on: October 13, 2026 <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-102860 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-102861 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-102862 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-102863 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-102864 Microsoft Office SharePoint Spoofing Vulnerability Published on: October 13, 2026 <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-102865 Microsoft Office SharePoint Information Disclosure Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-102866 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-102867 Microsoft Office Word Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-96183 Windows Health and Optimized Experiences Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-105591 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105592 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105593 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105595 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105596 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105597 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105598 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105599 Microsoft Office PowerPoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-94506 Microsoft Office Access Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-105713 Microsoft Office SharePoint Spoofing Vulnerability Published on: October 13, 2026 <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.</p> Read Details
CVE-2026-105714 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105715 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105716 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105720 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-97800 Windows Mobile Broadband Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108458 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69370 Visual Studio Code Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-108398 .NET Framework Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-108467 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-105717 Microsoft Office Access Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105718 Microsoft Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105719 Microsoft SharePoint Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-105722 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-105723 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-105726 Microsoft Defender Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70235 Windows Event Tracing Spoofing Vulnerability Published on: October 13, 2026 <p>Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.</p> Read Details
CVE-2026-105731 Microsoft Office Graphics Component Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-105732 SysInternals Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-105733 Windows Hyper-V Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-108399 Windows Hyper-V Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108461 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108462 Windows Kernel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-108464 Software Protection Platform (SPP) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108465 Windows Update Delivery Optimization Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108466 Windows Kernel Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-69898 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108460 Windows Message Queuing Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-49785 UEFI Secure Boot Security Feature Bypass Vulnerability Published on: October 13, 2026 Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. Read Details
CVE-2026-72968 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69363 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70566 Windows Schannel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69639 Windows libarchive Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-61931 Windows Perception Simulation Service Elevation of Privilege Vulnerability Published on: October 13, 2026 Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally. Read Details
CVE-2026-69763 Windows Storage Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69766 Windows Storage Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69935 Windows Storage Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69795 Windows Clipboard Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69867 SQLite Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69914 Windows AppX Deployment Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-69840 Windows Certificates Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69850 Windows Certificates Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69926 Desktop Window Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69905 Windows AppX Deployment Service Tampering Vulnerability Published on: October 13, 2026 <p>Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-69909 Microsoft COM for Windows Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69913 Windows TCP/IP Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69918 Windows Core Messaging Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69942 Windows Overlay Filter Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-69945 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69950 Windows Overlay Filter Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69947 Windows Overlay Filter Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.</p> Read Details
CVE-2026-69952 Windows Overlay Filter Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69953 Windows Overlay Filter Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69954 Windows Overlay Filter Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-69957 Windows Overlay Filter Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69958 Windows Overlay Filter Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.</p> Read Details
CVE-2026-69959 Windows Overlay Filter Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-69963 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69967 Windows Overlay Filter Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-69966 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69964 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69968 Windows libarchive Tampering Vulnerability Published on: October 13, 2026 <p>Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.</p> Read Details
CVE-2026-69970 Kernel Streaming Service Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69969 Windows AppX Deployment Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-69971 Windows Kernel-Mode Drivers Information Disclosure Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-69973 Windows libarchive Tampering Vulnerability Published on: October 13, 2026 <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.</p> Read Details
CVE-2026-69974 Desktop Window Manager Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-69976 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69978 Microsoft Windows VMSwitch Denial of Service Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.</p> Read Details
CVE-2026-69979 Windows AppX Deployment Service Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-70010 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70014 Windows Cryptographic Services Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-70015 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70017 Windows Secure Kernel Mode Information Disclosure Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70021 Windows Direct Composition Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70025 Windows Netlogon Denial of Service Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-70026 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70027 Windows Subsystem for Linux Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70033 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability Published on: October 13, 2026 <p>Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70056 Windows Update Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70057 Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-70058 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70059 Windows OLE Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70060 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70063 Windows Kernel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70062 Windows libarchive Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70064 Windows Kerberos Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70076 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70077 Windows Kernel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70079 Windows DNS Denial of Service Vulnerability Published on: October 13, 2026 <p>Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70082 Windows DNS Denial of Service Vulnerability Published on: October 13, 2026 <p>Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70085 Role: DNS Server Tampering Vulnerability Published on: October 13, 2026 <p>Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-70083 Role: DNS Server Tampering Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-70087 Role: DNS Server Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-70090 Windows Netlogon Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70097 Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.</p> Read Details
CVE-2026-70104 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70095 Windows iSCSI Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70103 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70093 Windows Rich Text Edit Control Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70106 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70121 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70139 Windows Update Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70108 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70117 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70114 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70127 Windows Domain Name Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in DNS Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70123 Microsoft Graphics Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70140 Windows Audio Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70115 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70132 Windows Portable Device File System Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70118 Windows Audio Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70126 Windows Bluetooth Port Driver Remote Code Execution Published on: October 13, 2026 <p>Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.</p> Read Details
CVE-2026-70135 Windows Remote POS Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70166 Windows DNS Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-70136 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70138 Windows OLE Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70119 Windows DNS Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-70155 Windows DNS Denial of Service Vulnerability Published on: October 13, 2026 <p>Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70133 Windows SMB Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70141 Microsoft Windows Search Component Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70173 Microsoft Windows Search Component Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70142 Windows Update Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70150 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70176 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70177 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70156 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70198 Windows Push Notifications Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70169 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70168 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70245 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70195 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70205 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70233 Windows Common Log File System Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70247 HTTP.sys Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-70218 Windows StateRepository API Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70223 Windows Console Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70225 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70234 Desktop Window Manager Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70249 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70253 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70255 Desktop Window Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70252 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Published on: October 13, 2026 <p>Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70271 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70272 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70273 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70274 Windows Bind Filter Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70278 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70280 Windows Hello Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-70284 Win32k Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70285 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-68836 Windows kernel32.dll Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69521 Windows iSCSI Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69705 Windows iSCSI Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69634 Windows iSCSI Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69644 Windows iSCSI Information Disclosure Vulnerability Published on: October 13, 2026 Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally. Read Details
CVE-2026-69883 Windows iSCSI Remote Code Execution Vulnerability Published on: October 13, 2026 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. Read Details
CVE-2026-69721 Windows iSCSI Information Disclosure Vulnerability Published on: October 13, 2026 Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally. Read Details
CVE-2026-72955 Windows Application Compatibility Cache Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-66822 .NET Information Disclosure Vulnerability Published on: October 13, 2026 <p>Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-69651 .NET Denial of Service Vulnerability Published on: October 13, 2026 <p>Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70580 Windows Credential Guard Spoofing Vulnerability Published on: October 13, 2026 <p>Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.</p> Read Details
CVE-2026-69354 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-72934 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-67625 Microsoft SQL Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-69387 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69830 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69650 Windows Key Distribution Center Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-72969 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69743 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69633 Windows Update Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69673 Windows Update Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69718 Windows Update Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69882 Windows Update Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-81964 Windows Update Orchestrator Service Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-81969 Windows Server Update Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83504 Windows SmartScreen Information Disclosure Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83500 Windows BitLocker Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.</p> Read Details
CVE-2026-83499 Windows Server Update Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83510 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83516 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-83515 RPC Runtime Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-83518 RPC Runtime Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83521 Windows IKE Extension Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-83571 Windows Audio Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83575 Windows Search Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83578 Microsoft PowerShell Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83580 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83583 Windows Geotag Broker Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83584 Windows Smart Card Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83635 Role: DNS Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-83641 Windows Media Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83642 Windows Domain Name Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83644 Windows Audio Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83646 Active Directory Federation Services (AD FS) Spoofing Vulnerability Published on: October 13, 2026 <p>Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-83648 Windows Active Directory Domain Services Denial of Service Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-83649 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-83650 Windows Media Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83652 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83654 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83655 Network Policy Server (NPS) Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-83657 Windows Modern Device Management (MDM) Tampering Vulnerability Published on: October 13, 2026 <p>Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-83658 Windows Error Reporting Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83666 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83667 Windows Active Directory Domain Services Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-83671 Windows Hyper-V Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83669 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83675 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83678 Windows TCP/IP Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83681 Microsoft PowerToys Tampering Vulnerability Published on: October 13, 2026 <p>Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-83687 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83688 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83690 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83691 Windows DHCP Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83692 Windows Bind Filter Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83694 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83693 Windows Error Reporting Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83699 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83700 Windows Now Playing Session Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83704 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83705 HTTP.sys Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83706 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83707 Windows Event Tracing Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83708 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83712 Windows NTFS Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-83713 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83715 Windows Error Reporting Tampering Vulnerability Published on: October 13, 2026 <p>Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-83719 Servicing Stack Updates Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83722 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83723 Windows Event Logging Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83726 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83727 Windows Overlay Filter Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83733 Windows Print Spooler Components Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83738 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83740 Windows Hello Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83748 Windows Error Reporting Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83749 Windows Overlay Filter Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83753 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83754 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83761 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83760 Microsoft Bluetooth Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83758 Windows Error Reporting Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-83759 Windows Encrypting File System (EFS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-83768 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83775 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83776 Windows Bluetooth Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> Read Details
CVE-2026-83779 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83780 Windows CCFFilter Driver Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83784 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-83787 Windows DHCP Server Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-83793 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83798 Windows Update Stack Spoofing Vulnerability Published on: October 13, 2026 <p>Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.</p> Read Details
CVE-2026-83796 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83826 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83827 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83828 Windows MIDI Service Module Elevation of Privileges Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83832 Windows Spaceport.sys Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83833 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83836 Windows Event Tracing Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.</p> Read Details
CVE-2026-83834 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83839 Windows Hyper-V Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83838 Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.</p> Read Details
CVE-2026-83842 Windows TCP/IP Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83843 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-83844 Windows Paint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83849 Windows Hello Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83847 Microsoft Account Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83846 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83848 Windows COM+ Event System Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83851 Windows Partition Management Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-83852 Windows Bind Filter Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83853 Windows Hello Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83854 Windows Notification Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Notification allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83855 Windows WLAN Service Denial of Service Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83864 Windows NTFS Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83865 Windows Internet (wininet.dll) Tampering Vulnerability Published on: October 13, 2026 <p>Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-83872 Windows TCP/IP Local Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83875 Windows Human Interface Device Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83869 Windows Domain Name Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83876 Windows Shell Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83866 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83882 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83901 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83868 Microsoft Bluetooth Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83867 Windows Push Notifications Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83879 Windows Overlay Filter Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83902 Windows Direct Composition Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83885 Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability Published on: October 13, 2026 <p>Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.</p> Read Details
CVE-2026-83892 Windows Human Interface Device Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83893 Windows Clipboard User Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83896 Windows Direct Composition Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70086 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70089 Windows GDI Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70128 HID Parser Library Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70151 Windows Direct Composition Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70163 Microsoft OpenSSH for Windows Denial of Service Vulnerability Published on: October 13, 2026 <p>Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70222 Windows Shell Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83909 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70241 Windows Kerberos Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70243 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70248 Windows Hyper-V Denial of Service Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.</p> Read Details
CVE-2026-70275 Windows CD-ROM File System Driver Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70286 Windows Graphics Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70299 Windows Bind Filter Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83569 HID Parser Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83586 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83741 Internet Explorer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83769 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83911 Windows Storage Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83871 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83886 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83912 Windows Direct Composition Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83906 Windows Shell Spoofing Vulnerability Published on: October 13, 2026 <p>Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-85841 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-83914 Microsoft XML Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83916 Windows Error Reporting Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Double free in Windows Error Reporting allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-83917 Windows ALPC Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83921 Windows Search Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83919 Microsoft Internet Messaging API Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-83920 Windows Search Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83922 Windows Direct Composition Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83926 Windows Hello Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-83928 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83927 Windows Registry Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83932 Windows Group Policy Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83929 Windows GDI Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69886 Windows Imaging Component Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-84009 Windows Projected File System Tampering Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-84007 Remote Desktop Gateway Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-84012 Windows Remote Desktop Services Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-84011 Windows SMB Client Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-84013 Windows Telephony Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-84014 Windows Device Association Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-84015 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-84016 Windows EAPHost Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-84017 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-84018 Windows Print Spooler Components Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-84019 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-84020 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85318 Servicing Stack Updates Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85320 Windows Print Spooler Components Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85319 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Published on: October 13, 2026 <p>Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-85321 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Published on: October 13, 2026 <p>Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-85322 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85323 Network Device Enrollment Service (NDES) Spoofing Vulnerability Published on: October 13, 2026 <p>Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-85324 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Published on: October 13, 2026 <p>Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-85327 Windows Print Spooler Components Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85331 Windows Device Association Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85328 Windows Projected File System Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85336 Windows Device Association Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85332 Windows Device Association Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85333 Windows Performance Monitor Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85334 Windows Message Queuing Queue Manager Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85342 Windows Device Association Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85353 Windows Print Spooler Components Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85338 Microsoft Graphics Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85337 Windows Remote Desktop Client Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85343 Windows Hyper-V Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85339 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Published on: October 13, 2026 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine Read Details
CVE-2026-85341 Windows USB Video Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85352 Windows Device Association Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85354 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85355 Windows Common Log File System Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85356 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85357 Windows Phone Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85358 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85359 Windows Performance Monitor Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85361 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85362 Windows Management Instrumentation Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85364 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85365 Servicing Stack Updates Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85366 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85368 Windows TCP/IP Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85367 Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85370 WebDAV Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in WebDAV allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85369 Windows Hyper-V Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85372 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85371 Network Policy Server (NPS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85373 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85374 Windows Installer Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85375 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85376 Windows Print Spooler Components Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85377 Windows CD-ROM Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85790 Microsoft QUIC Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85791 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85792 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Published on: October 13, 2026 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine Read Details
CVE-2026-85793 Windows Sysmain Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85794 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85795 Windows Text Services Framework Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85796 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85797 Windows GDI Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85798 Windows Distributed File System (DFS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-85799 Network Policy Server (NPS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85800 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85802 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85803 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85804 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85805 Microsoft PowerShell Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-85806 Network Policy Server (NPS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85807 Windows USB Video Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85809 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Published on: October 13, 2026 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine Read Details
CVE-2026-85808 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-85810 Windows Telephony Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85811 Network Policy Server (NPS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.</p> Read Details
CVE-2026-85812 Windows Bind Filter Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85814 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85815 Windows Device Association Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85816 Windows Wi-Fi Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.</p> Read Details
CVE-2026-85817 Microsoft PowerShell Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85818 Windows Schannel Spoofing Vulnerability Published on: October 13, 2026 <p>Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-85820 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85821 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85822 Windows exFAT File System Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85825 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85823 Windows Composite Image File System Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85824 Windows Composite Image File System Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85826 Windows Fast FAT Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85827 WebDAV Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85828 WebDAV Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85829 Windows Wired AutoConfig Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85830 Windows Installer Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85831 Windows Biometric Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85832 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85833 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85834 Windows TCP/IP Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85835 Servicing Stack Updates Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85836 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85837 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85840 Windows Event Viewer Information Disclosure Vulnerability Published on: October 13, 2026 <p>Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85842 Windows Image Acquisition Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85843 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85846 Web Account Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85847 Windows Print Spooler Components Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85848 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85849 Windows AppX Deployment Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85850 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85851 Windows SmartScreen Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85852 Windows Management Instrumentation Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85853 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85854 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85855 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85856 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.</p> Read Details
CVE-2026-85857 Windows Kernel-Mode Drivers Information Disclosure Vulnerability Published on: October 13, 2026 <p>Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85860 Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85858 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85859 Windows Message Queuing Queue Manager Denial of Service Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-85861 Clipboard User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85863 Clipboard User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85864 Python Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper privilege management in Python allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85865 Windows DHCP Server Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-85868 Windows Common Log File System Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85870 Windows Common Log File System Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85869 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85871 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-71347 Windows Security Center Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85881 Microsoft Office Graphics Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-85891 Azure HDInsight Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85915 Windows PCI Bus Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85918 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85920 Windows BitLocker Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85927 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88080 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87708 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87711 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88091 Windows Management Instrumentation Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88096 Windows DCOM Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88101 Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88124 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88157 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88158 Microsoft Digest Authentication Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-88161 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88160 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88159 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88168 Windows Bind Filter Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88162 Windows Encrypting File System (EFS) Tampering Vulnerability Published on: October 13, 2026 <p>Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-88173 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88165 Windows Active Directory Domain Services Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-69943 Microsoft Office SharePoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-69877 Azure DevOps Information Disclosure Vulnerability Published on: October 13, 2026 <p>Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-69916 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69934 Windows Spaceport.sys Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70041 Windows CD-ROM Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70048 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70052 Microsoft PowerShell Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-70164 Windows TCP/IP Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70167 Windows Domain Name Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-70170 Windows Kernel Denial of Service Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-70172 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70185 Microsoft PowerShell Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-70187 Windows Remote Desktop Services Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70210 Windows OLE DB Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70213 Microsoft Power Apps Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-70216 Windows Mobile Device Management Tampering Vulnerability Published on: October 13, 2026 <p>Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-70238 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70244 Windows DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-70262 WebDAV Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70270 Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70277 Windows Fast FAT File System Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.</p> Read Details
CVE-2026-70303 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83674 Active Directory Federation Services (AD FS) Spoofing Vulnerability Published on: October 13, 2026 <p>Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-83710 Windows Device Association Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83888 Windows CD-ROM Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-85329 Microsoft Account Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85867 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85904 Windows Device Association Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85914 Windows Embedded Mode Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85916 Azure Active Directory Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.</p> Read Details
CVE-2026-85926 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85928 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85930 Windows Image Acquisition Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85931 Windows Distributed File System (DFS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-85933 Windows Print Spooler Components Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85934 Windows AppX Deployment Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85935 Windows USB Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85938 Windows Broadcast DVR User Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85936 Windows Shell Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Double free in Windows Shell allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85939 Windows Kernel Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-85945 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87691 Windows Management Services Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87697 .NET Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-87706 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87707 Windows Fax and Scan Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87710 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87712 Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87713 Windows Bluetooth Port Driver Remote Code Execution Published on: October 13, 2026 <p>Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.</p> Read Details
CVE-2026-87714 WebDAV Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-87716 Windows Storage Spaces Controller Denial of Service Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-88070 Windows BitLocker Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88071 Windows Hyper-V Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88073 Windows Graphics Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88074 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-68883 Microsoft SQL Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70189 Microsoft SQL Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-83945 Microsoft SQL Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-85876 Microsoft SQL Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in SQL Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85886 Microsoft SQL Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-88098 Windows Security Support Provider Interface Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88099 Windows Failover Cluster Denial of Service Vulnerability Published on: October 13, 2026 <p>Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-88100 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88102 Microsoft Failover Cluster Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88106 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88107 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88132 Azure Key Vault Information Disclosure Vulnerability Published on: October 13, 2026 <p>Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88136 Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-88137 WebDAV Information Disclosure Vulnerability Published on: October 13, 2026 <p>Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88140 Windows Key Storage Provider Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-88143 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88146 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69923 Windows AI Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69940 Windows Client for NFS Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-69949 Windows Client for NFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69955 Windows Client for NFS Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-69977 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69982 Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-70005 Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-70113 Windows Client for NFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70008 Windows IP Over USB Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70024 Windows Internet Information Services Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70011 Windows IP Over USB Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70038 Windows iSCSI Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70031 Windows iSCSI Denial of Service Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70013 Windows iSCSI Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70045 Windows Work Folders Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70137 Windows Remote Access Connection Manager Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70134 Windows Event Tracing Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70102 Windows Spaceport.sys Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70044 Microsoft Windows Media Foundation Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.</p> Read Details
CVE-2026-70131 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70068 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70110 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70092 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70109 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70116 Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.</p> Read Details
CVE-2026-70149 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70186 ASP.NET Core Denial of Service Vulnerability Published on: October 13, 2026 <p>Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70174 .NET Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70159 ASP.NET Core Denial of Service Vulnerability Published on: October 13, 2026 <p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70161 .NET Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70165 .NET Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70175 ASP.NET Core Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70196 ASP.NET Core Denial of Service Vulnerability Published on: October 13, 2026 <p>Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70179 ASP.NET Core Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70181 ASP.NET Core Denial of Service Vulnerability Published on: October 13, 2026 <p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-70183 ASP.NET Core Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70190 .NET Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70188 ASP.NET Core Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-70197 .NET Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70194 .NET Framework Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-70268 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70220 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> Read Details
CVE-2026-70256 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70267 Microsoft Office SharePoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-70206 Microsoft Office Word Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-70251 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70269 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70257 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70282 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70263 Microsoft Office Word Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-70259 Microsoft Office SharePoint Information Disclosure Vulnerability Published on: October 13, 2026 <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-70266 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70287 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70276 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70291 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70302 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70301 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70300 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83891 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70298 Microsoft Office SharePoint Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85900 Microsoft Office SharePoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-88153 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88150 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88145 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88151 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88156 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88155 Microsoft Office SharePoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-88175 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88167 Microsoft Office Word Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88169 Microsoft Office Word Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88178 Microsoft Office PowerPoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88201 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88197 Microsoft Office Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88196 Microsoft Office Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88198 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-88202 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88204 Microsoft Office SharePoint Spoofing Vulnerability Published on: October 13, 2026 <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-88209 Microsoft Office SharePoint Spoofing Vulnerability Published on: October 13, 2026 <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-88208 Microsoft Office SharePoint Spoofing Vulnerability Published on: October 13, 2026 <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-70049 Microsoft Configuration Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 Updated the vulnerability title and description to correctly identify Microsoft Configuration Manager as the affected product. Added an FAQ explaining the exploitation requirements. This is an informational change only; the affected products, security updates, severity, and CVSS scores are unchanged. Read Details
CVE-2026-96204 Azure Arc Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-96215 Windows Autopilot Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96216 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96217 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96218 Windows Update Stack Tampering Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-96219 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96220 Windows Assigned Access Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96222 Active Directory Federation Services (AD FS) Spoofing Vulnerability Published on: October 13, 2026 <p>Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-96223 Windows Hyper-V Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96224 .NET Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96236 ASP.NET Core Denial of Service Vulnerability Published on: October 13, 2026 <p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-96244 Windows Internal System User Profile Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96245 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-96246 Network Policy Server (NPS) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-96247 Windows Kernel-Mode Drivers Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96248 Windows Host Guardian Service Denial of Service Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-96302 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96305 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96306 Windows Sysmain Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96311 Windows Network List Service Tampering Vulnerability Published on: October 13, 2026 <p>Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-96307 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96308 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96309 Windows Subsystem for Linux Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96314 Windows Audio Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96312 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96313 Windows Push Notifications Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96315 Windows Overlay Filter Tampering Vulnerability Published on: October 13, 2026 <p>Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-96316 Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-96317 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96319 Windows USB Print Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96318 Windows Resume Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96849 Windows Kernel-Mode Drivers Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96848 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96866 Network Device Enrollment Service (NDES) Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-96851 Windows Management Instrumentation Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96862 Windows Spaceport.sys Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96855 Windows Modern Device Management (MDM) Tampering Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-96856 Windows Management Instrumentation Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96857 Windows Projected File System Information Disclosure Vulnerability Published on: October 13, 2026 <p>Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96863 Windows Storage Port Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> Read Details
CVE-2026-96859 Windows Imaging Component Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96860 Windows USB Print Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96861 Network Device Enrollment Service (NDES) Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-96864 Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96865 Windows Secure Kernel Mode Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96867 Windows NTFS Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-96868 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96920 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96921 Windows Message Queuing Queue Manager Information Disclosure Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96928 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96935 Windows NTFS Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96943 Windows Raw Image Extension Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69452 Windows Enterprise App Management Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-95904 Windows Event Logging Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96108 Desktop Window Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97012 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97016 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96995 Microsoft Office Word Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96996 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> Read Details
CVE-2026-97005 Microsoft Office PowerPoint Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.</p> Read Details
CVE-2026-97749 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97001 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> Read Details
CVE-2026-97744 Microsoft Office PowerPoint Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.</p> Read Details
CVE-2026-96997 Microsoft Office OneNote Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97014 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> Read Details
CVE-2026-97009 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> Read Details
CVE-2026-97750 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97753 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97017 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97740 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97766 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97003 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97751 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97776 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97752 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97758 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97754 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97761 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97747 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97780 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97767 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97770 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97771 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97755 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97765 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97739 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97778 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97759 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97774 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97782 Microsoft Office SharePoint Tampering Vulnerability Published on: October 13, 2026 <p>Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.</p> Read Details
CVE-2026-97783 Microsoft Office SharePoint Spoofing Vulnerability Published on: October 13, 2026 <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-96096 Windows Media Player Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97789 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97794 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-59116 Windows Remote Desktop Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-62879 Windows SmartScreen Tampering Vulnerability Published on: October 13, 2026 Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally. Read Details
CVE-2026-62687 Windows Backup Engine Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-69931 Windows Storage Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69856 Windows Storage Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69880 Desktop Window Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69984 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69985 Windows libarchive Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69986 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69988 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69987 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69995 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69997 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69996 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69991 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69994 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69992 Remote Desktop Services Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69998 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69999 Windows Update Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70012 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70004 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70006 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70051 Windows SmartScreen Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70055 Windows Cryptographic Services Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70066 Windows DHCP Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70067 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70069 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-70071 Role: DNS Server Tampering Vulnerability Published on: October 13, 2026 <p>Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-70074 Windows DNS Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70072 Windows Netlogon Denial of Service Vulnerability Published on: October 13, 2026 <p>Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-70075 Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-70144 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70207 Network Policy Server (NPS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-70157 Windows System Information Console Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70199 Windows Kernel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70211 Win32k Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70201 Windows DHCP Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.</p> Read Details
CVE-2026-70230 Windows Audio Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70208 HTTP.sys Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70209 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70232 Windows Kernel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70236 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70237 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70258 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70288 Win32k Information Disclosure Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70292 Win32k Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70293 Win32k Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70294 Win32k Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70295 Win32k Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-69736 Windows Credential Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69765 Windows Storport Miniport Driver Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-77902 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-65674 Microsoft SQL Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-67626 Microsoft SQL Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-67628 Microsoft SQL Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-69640 Windows Key Distribution Center Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-69733 Windows Update Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69783 Windows Update Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69471 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69577 Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-69596 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-78459 Microsoft Internet Information Services Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69635 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.</p> Read Details
CVE-2026-73027 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-77496 Windows Imaging Component Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69326 Graphic Fonts Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69454 Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-81971 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83505 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83506 Servicing Stack Updates Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83508 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83507 Windows Update Orchestrator Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83509 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83511 Active Directory Federation Services (AD FS) Spoofing Vulnerability Published on: October 13, 2026 <p>Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-83514 Windows Partition Management Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83513 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83517 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83519 Windows Error Reporting Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83522 Windows IKE Extension Spoofing Vulnerability Published on: October 13, 2026 <p>Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-83523 Windows Image Acquisition Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83564 Windows Search Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83565 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83566 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83567 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83568 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83570 Windows Search Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83573 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> Read Details
CVE-2026-83574 Windows Search Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83579 Windows Smart Card Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83582 Windows Graphics Kernel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83585 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83587 Windows Core Messaging Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83588 Windows USB Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83634 Windows BitLocker Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83636 Windows Hyper-V Denial of Service Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.</p> Read Details
CVE-2026-83637 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83638 Windows USB Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83639 Windows Sensor Data Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83640 Windows NTFS Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-83643 Windows Error Reporting Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83645 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Published on: October 13, 2026 <p>Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-83647 Windows Active Directory Domain Services Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-83651 Windows GDI Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-83656 Windows Modern Device Management (MDM) Tampering Vulnerability Published on: October 13, 2026 <p>Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-83659 Windows User Profile Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83664 Windows Portable Device File System Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83665 Windows DHCP Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-83668 Windows WLAN Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83670 Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-83672 Windows Installer Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83676 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83677 Windows DHCP Client Denial of Service Vulnerability Published on: October 13, 2026 <p>Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-83679 Windows Defender Firewall Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83680 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83682 Windows TCP/IP Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83683 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-83685 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-83686 Microsoft Windows Search Component Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83689 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83696 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83695 Windows Event Logging Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83697 Windows Modern Device Management (MDM) Tampering Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-83698 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83701 Windows Now Playing Session Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83702 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83703 Windows Wi-Fi Driver Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.</p> Read Details
CVE-2026-83709 Windows NTLM Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83714 HTTP.sys Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83716 Windows Hyper-V Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-83717 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83718 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83720 Windows Kerberos Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83721 Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83724 Windows Management Instrumentation Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83725 Microsoft Windows Search Component Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83728 Windows Hyper-V Spoofing Vulnerability Published on: October 13, 2026 <p>Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.</p> Read Details
CVE-2026-83732 Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83739 Windows Bluetooth Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.</p> Read Details
CVE-2026-83736 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83735 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83737 Windows NTFS Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83747 Windows Error Reporting Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83750 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83751 Windows MIDI Service Module Elevation of Privileges Vulnerability Published on: October 13, 2026 <p>Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83752 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83755 Win32k Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83756 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83757 Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83762 Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83765 Windows DWM Core Library Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83764 Windows Clipboard User Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83763 Windows Input System Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83766 Windows Hyper-V Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.</p> Read Details
CVE-2026-83767 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83770 Windows Text Shaping Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83771 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.</p> Read Details
CVE-2026-83773 Windows MIDI Service Module Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83774 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83778 Microsoft Internet Messaging API Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83777 Windows Bluetooth Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.</p> Read Details
CVE-2026-83783 Windows Management Instrumentation Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83785 Windows COM+ Event System Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83781 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83786 Windows NTFS Information Disclosure Vulnerability Published on: October 13, 2026 <p>Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83788 Windows rndismp6.sys Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.</p> Read Details
CVE-2026-83789 Windows SMB Client Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-83790 Windows Hello Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83791 Windows Virtual Input Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83792 Windows Device Install Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83794 Windows Portable Device MTP Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83795 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-83797 Windows Partition Management Driver Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83829 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83830 Windows COM+ Event System Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83835 Windows Common Log File System Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83837 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83840 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83841 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83845 Windows Internet (wininet.dll) Spoofing Vulnerability Published on: October 13, 2026 <p>Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.</p> Read Details
CVE-2026-83850 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83856 Windows Event Logging Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83857 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83859 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83860 Windows GDI Denial of Service Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-83861 Windows Remote Desktop Protocol Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83863 Servicing Stack Updates Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83874 Windows Event Tracing Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83883 Windows Win32k Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83881 Windows exFAT File System Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83887 HID Parser Library Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83884 Windows Human Interface Device Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83898 HID Parser Library Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83870 Windows Aggregated Data Platform Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83895 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.</p> Read Details
CVE-2026-83877 Windows Devices Human Interface Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83873 Windows Shell Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83889 Windows DNS Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-83897 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83899 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83900 Windows Bind Filter Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83903 Windows Direct Composition Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85872 Windows Storage VSP Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85901 Windows Graphics Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85902 Windows Direct Composition Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85903 Windows Domain Name Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83904 HID Parser Library Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83905 Windows Shell Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85905 Windows UI Immersive Server API Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85906 Windows Direct Composition Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83907 Windows Hello Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83908 RPC Runtime Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85908 Windows Graphics Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83910 RPC Runtime Library Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85909 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85910 Windows StateRepository API Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85911 Windows StateRepository API Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83913 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85912 Clipboard User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83915 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83918 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83923 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83924 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83925 Windows Kernel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83931 Windows Hyper-V Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-83930 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-83933 Windows Update Orchestrator Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-83934 Windows GDI+ Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83935 Microsoft XML Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-62840 Linux Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85874 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-85879 Windows Subsystem for Linux Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69789 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.</p> Read Details
CVE-2026-69798 Windows Wired AutoConfig Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85884 Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85941 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85943 Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87699 Winlogon Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88076 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87705 Windows Hyper-V Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.</p> Read Details
CVE-2026-87693 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87694 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87709 Windows Host Guardian Service Tampering Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-87698 Windows Remote Access Service Infrastructure Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-87704 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87700 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87715 Windows Installer Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88072 Windows Host Guardian Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87702 Windows Resource Management (MRM) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88079 Windows MIDI Service Module Elevation of Privileges Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88103 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88105 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88127 Windows SMB Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88134 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88109 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88126 WebDAV Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88110 Windows Graphics Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88113 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88135 WebDAV Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88115 Windows Server for NFS Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88128 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88118 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88147 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88121 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88152 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88133 Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88139 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88141 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88142 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88149 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88171 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88174 Windows Deployment Services Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88177 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88179 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88180 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88182 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88181 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88194 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88189 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88191 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88188 Windows DWM Core Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88193 Microsoft Scripting Engine Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69884 Windows GDI Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69902 Windows NTFS Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-69915 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70054 Windows NetBIOS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70084 Windows Projected File System Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70112 Windows Spaceport.sys Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-70122 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70143 Windows Network File System Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-70148 Windows Broadcast DVR User Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70158 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Published on: October 13, 2026 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine Read Details
CVE-2026-70160 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85922 Azure Key Vault Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-85925 Azure Key Vault Client SDK Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70111 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70184 Windows Backup Engine Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70227 Windows Device Association Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70228 Desktop Window Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70229 Windows Active Directory Domain Services Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70250 Windows DHCP Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.</p> Read Details
CVE-2026-70260 Microsoft Trace Data Helper Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70261 Microsoft Trace Data Helper Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70264 Microsoft Defender Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70279 Microsoft Exchange Server Spoofing Vulnerability Published on: October 13, 2026 <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-70297 Skype for Business Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-70571 Microsoft Exchange Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-77910 Microsoft Exchange Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-83746 Skype for Business Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-85873 Skype for Business Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-87692 Microsoft Exchange Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87695 Microsoft Exchange Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-87696 Microsoft Exchange Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-88075 Configuration Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-88082 Microsoft SQL Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88083 Microsoft SQL Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88081 Microsoft SQL Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-85888 Microsoft SQL Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88084 Microsoft SQL Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-88086 Microsoft SQL Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.</p> Read Details
CVE-2026-85919 Microsoft SQL Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88088 Microsoft SQL Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88085 Microsoft SQL Server Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88089 Microsoft SQL Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-88092 ASP.NET Core Tampering Vulnerability Published on: October 13, 2026 <p>Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.</p> Read Details
CVE-2026-88093 Desktop Window Manager Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88112 Windows Domain Name Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88114 Windows Domain Name Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88116 Windows Domain Name Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88117 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88119 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88120 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88122 Role: DNS Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-88123 Role: DNS Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-88125 Role: DNS Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-88129 Role: DNS Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-88130 Role: DNS Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-69802 Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69919 Windows Cryptographic Services Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70153 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70202 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70214 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> Read Details
CVE-2026-70254 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70219 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-70217 Microsoft Office SharePoint Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-70281 Microsoft Office Outlook Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-70215 Microsoft Office PowerPoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70246 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-70242 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88144 Microsoft Office PowerPoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-85340 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-85932 Microsoft Office SharePoint Information Disclosure Vulnerability Published on: October 13, 2026 <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88163 Microsoft Office SharePoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-88154 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88164 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-88172 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88184 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88166 Microsoft Office SharePoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-88200 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-88185 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88186 Microsoft Office Word Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88183 Microsoft Office PowerPoint Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88192 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88190 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88195 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88203 Microsoft Office PowerPoint Information Disclosure Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-88206 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-88210 Microsoft Office Word Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-88207 Microsoft Office PowerPoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-94512 SQL Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-94520 Microsoft SQL Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.</p> Read Details
CVE-2026-70343 Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96044 Microsoft Office SharePoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-96186 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96188 Microsoft PowerToys Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96206 Windows Subsystem for Linux Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-70007 .NET Framework Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-70035 .NET Framework Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83520 .NET Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-84008 .NET Denial of Service Vulnerability Published on: October 13, 2026 <p>Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-85363 .NET Framework Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-96231 .NET Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96225 .NET Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96233 ASP.NET Core Denial of Service Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-96229 .NET Information Disclosure Vulnerability Published on: October 13, 2026 <p>Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-96230 ASP.NET Core Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96232 .NET Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-96234 .NET Information Disclosure Vulnerability Published on: October 13, 2026 <p>Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-96235 .NET Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96237 .NET Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96238 .NET Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-96243 Windows WalletService Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96249 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96250 Windows USB Print Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96301 Windows USB Print Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96310 Windows USB Print Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96254 Windows USB Print Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96253 Windows USB Print Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96252 Active Directory Federation Services (AD FS) Spoofing Vulnerability Published on: October 13, 2026 <p>Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96300 RPC Endpoint Mapper Service Denial of Service Vulnerability Published on: October 13, 2026 <p>Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-96304 Windows USB Print Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-96320 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96323 Windows Update Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Update allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96322 Windows Remote Desktop Protocol Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96321 Remote Desktop Display Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96324 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96325 Windows SMB Server Denial of Service Vulnerability Published on: October 13, 2026 <p>Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-96850 Windows Modern Device Management (MDM) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96844 Microsoft Bluetooth Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.</p> Read Details
CVE-2026-96846 WebDAV Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96847 WebDAV Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96843 WebDAV Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96854 Windows Device Association Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96852 Windows TCP/IP Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96853 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96858 Windows Security Account Manager Tampering Vulnerability Published on: October 13, 2026 <p>Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-96909 Windows BitLocker Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96916 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96911 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96910 Microsoft Windows Search Component Information Disclosure Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96912 Windows Client License Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96913 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96915 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96914 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96917 Windows PCI Bus Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96918 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96919 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96923 Windows Workstation Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96925 Windows NTFS Information Disclosure Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96924 Windows OLE Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96933 Windows COM+ Event System Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96927 Windows NTFS Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96930 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96934 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96932 Windows Embedded Mode Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96931 Windows NTFS Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96929 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96926 Role: DNS Server Tampering Vulnerability Published on: October 13, 2026 <p>Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-69675 Windows Network File System Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-85866 Windows ALPC Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96937 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96938 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96939 Servicing Stack Updates Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88094 Azure Storage Library Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-21413 Raw Image Extension Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96944 Windows Storage Information Disclosure Vulnerability Published on: October 13, 2026 <p>Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96945 Windows Failover Cluster Denial of Service Vulnerability Published on: October 13, 2026 <p>Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-96946 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96947 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96948 Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-96949 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96950 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96951 Windows Shell Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-96953 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-96952 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-95943 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-96957 .NET Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-96958 .NET Denial of Service Vulnerability Published on: October 13, 2026 <p>Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-96959 .NET Denial of Service Vulnerability Published on: October 13, 2026 <p>Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-96960 .NET Denial of Service Vulnerability Published on: October 13, 2026 <p>Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-97748 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97007 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97779 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97756 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97008 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97769 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97773 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97010 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97743 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97777 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97762 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97011 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97757 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97738 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97742 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97760 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97746 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97004 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97741 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97763 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97775 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97772 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97768 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97745 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96071 Windows Media Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-96118 Windows Graphics Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97788 Active Directory Federation Services (AD FS) Information Disclosure Vulnerability Published on: October 13, 2026 <p>Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97787 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97790 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-97792 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97793 Windows Setup and Deployment Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-100200 Windows Update Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-100201 Windows Client License Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-100203 Windows Update Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-100205 SysInternals Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-100207 Azure CycleCloud Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-100211 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-100209 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-100210 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-100212 Microsoft Office Excel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-102851 Visual Studio Code Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-58280 .NET Denial of Service Vulnerability Published on: October 13, 2026 <p>Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-102870 ASP.NET Core Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105729 SysInternals Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108396 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-100214 Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-100216 Windows Storage Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-100217 Windows Group Policy Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-100218 Remote Desktop Gateway Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-100219 Microsoft QUIC Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-100220 Windows Media Video Decoder Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-88219 RPC Runtime Library Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-69506 Windows Key Storage Provider Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-100222 Network Policy Server (NPS) Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-100225 Windows Storage Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70023 Windows Hyper-V Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-70212 Windows Security Center Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-88226 Windows Storage Port Driver Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.</p> Read Details
CVE-2026-96209 Windows Network File System Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102187 Windows Kernel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-102186 Windows Network File System Information Disclosure Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-102188 Windows Storage Port Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> Read Details
CVE-2026-102189 Windows Storage Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102191 Windows Storage Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102192 Windows Failover Cluster Denial of Service Vulnerability Published on: October 13, 2026 <p>Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-102193 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102194 Windows Graphics Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102195 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102196 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102197 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102198 Windows Remote Desktop Protocol Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-102199 Microsoft Windows Codecs Library Denial of Service Vulnerability Published on: October 13, 2026 <p>Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-102201 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102203 RPC Runtime Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-102202 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102204 Microsoft Microsoft Defender for Endpoint Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102206 Windows Portable Device MTP Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> Read Details
CVE-2026-102205 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102207 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102208 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102209 Microsoft Graphics Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102210 Windows Text Shaping Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-102211 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102216 Windows StateRepository API Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102218 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102215 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102221 Secure Boot Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.</p> Read Details
CVE-2026-102220 Windows VHD miniport driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-102214 Windows Hyper-V Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.</p> Read Details
CVE-2026-102217 WebDAV Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-100215 Microsoft Graphics Component Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.</p> Read Details
CVE-2026-102225 Windows Text Shaping Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-102226 Dynamics Business Central Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-102869 .NET and Visual Studio Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-109453 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-69922 Microsoft Office Excel Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-103553 Windows Partition Management Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-103554 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-103555 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-103558 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Published on: October 13, 2026 <p>Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-103560 Role: DNS Server Tampering Vulnerability Published on: October 13, 2026 <p>Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.</p> Read Details
CVE-2026-103565 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-103567 Windows Broadcast DVR User Service Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.</p> Read Details
CVE-2026-103568 Windows Credential Providers Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-103569 Windows IKE Extension Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-103575 Remote Desktop Client Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-103576 Active Directory Federation Services (AD FS) Spoofing Vulnerability Published on: October 13, 2026 <p>Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-103577 Microsoft QUIC Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-103578 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.</p> Read Details
CVE-2026-105003 HID Class Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-105004 Windows Overlay Filter Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-105005 Windows Schannel Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-105006 HID Class Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> Read Details
CVE-2026-105007 Windows NDIS Elevation of Privilege Vulnerability Published on: October 13, 2026 An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker who successfully exploited this vulnerability could run processes in an elevated context. However, an attacker must first gain access to the local system with the ability to execute a malicious application in order to exploit this vulnerability. The security update addresses the vulnerability by changing how ndis.sys validates buffer length. Read Details
CVE-2026-105008 Windows Schannel Spoofing Vulnerability Published on: October 13, 2026 <p>No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-105009 Windows Server Update Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-105010 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-97798 Windows Error Reporting Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97799 Windows Audio Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> Read Details
ADV990001 Latest Servicing Stack Updates Published on: October 13, 2026 Advisory updated to announce new versions of Servicing Stack Updates are available. Please see the FAQ for details. Read Details
CVE-2026-70162 .NET Denial of Service Vulnerability Published on: October 13, 2026 A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application. The update addresses the vulnerability by correcting how the .NET web application handles web requests. Read Details
CVE-2026-92707 MessagePack-CSharp Denial of Service Vulnerability Published on: October 13, 2026 <p>Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-105013 Microsoft Office SharePoint Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> Read Details
CVE-2026-96113 Windows Domain Name Service Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97803 Windows Kernel Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97804 HID Class Driver Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97805 Windows Partition Management Driver Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97806 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97807 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97808 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97809 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97810 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97811 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97812 Windows Update Orchestrator Service Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-97813 Windows Hyper-V Information Disclosure Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97814 Windows Text Shaping Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97815 Windows Error Reporting Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97816 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97817 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97819 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97820 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97821 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97822 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97823 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97824 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97825 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97826 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97827 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97828 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97829 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97830 Windows Internet Information Services Denial of Service Vulnerability Published on: October 13, 2026 <p>Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.</p> Read Details
CVE-2026-97831 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97832 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97833 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97834 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97835 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97836 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97837 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97838 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97839 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97840 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97841 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97842 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97843 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-97844 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-108127 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-108128 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-108129 Role: DNS Server Information Disclosure Vulnerability Published on: October 13, 2026 <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> Read Details
CVE-2026-108130 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108131 Active Directory Federation Services (AD FS) Spoofing Vulnerability Published on: October 13, 2026 <p>No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-108132 Windows Kerberos Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108133 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108134 Windows Autopilot Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108135 Windows Backup Engine Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108136 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108471 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Published on: October 13, 2026 <p>Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.</p> Read Details
CVE-2026-108463 Windows SmartScreen Security Feature Bypass Vulnerability Published on: October 13, 2026 <p>Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.</p> Read Details
CVE-2026-97801 .NET Framework Tampering Vulnerability Published on: October 13, 2026 <p>Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.</p> Read Details
CVE-2026-105016 Microsoft QUIC Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-97781 Microsoft Office OneNote Remote Code Execution Vulnerability Published on: October 13, 2026 <p>Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.</p> Read Details
Chromium: CVE-2025-12727 Inappropriate implementation in V8 Published on: October 12, 2026 Information published. Read Details
Chromium: CVE-2025-12441 Out of bounds read in V8 Published on: October 12, 2026 Information published. Read Details
Chromium: CVE-2025-12433 Inappropriate implementation in V8 Published on: October 12, 2026 Information published. Read Details
Chromium: CVE-2025-12432 Race in V8 Published on: October 12, 2026 Information published. Read Details
Chromium: CVE-2025-12429 Inappropriate implementation in V8 Published on: October 12, 2026 Information published. Read Details
Chromium: CVE-2025-12428 Type Confusion in V8 Published on: October 12, 2026 Information published. Read Details
CVE-2026-62744 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-68875 Windows NTFS Remote Code Execution Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-68878 Windows Fast FAT Driver Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69281 Windows License Manager Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69337 Windows Registry Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69451 Windows Management Instrumentation Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69582 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69693 Windows Device Association Broker Service Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-72979 Windows DHCP Server Remote Code Execution Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-72982 Windows Netlogon Remote Code Execution Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-68880 Windows Win32k Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69277 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69301 Windows Win32k Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69324 Windows Performance Monitor Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69340 Windows NTFS Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69385 Windows TCP/IP Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69433 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69571 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69566 Windows NTFS Remote Code Execution Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69688 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-72987 Windows DNS Remote Code Execution Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-73006 DirectWrite Remote Code Execution Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69598 Windows iSCSI Remote Code Execution Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62777 Windows License Manager Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62751 Windows Projected File System Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62876 Windows Win32k Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-54986 Windows Win32k Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-50448 Windows NTFS Remote Code Execution Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-50677 Windows Media Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-50375 DirectX Graphics Kernel Elevation of Privilege Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability Published on: October 09, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69435 Azure SRE Agent Elevation of Privilege Vulnerability Published on: October 08, 2026 Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. Read Details
CVE-2026-77900 Azure App Service Remote Code Execution Vulnerability Published on: October 08, 2026 <p>Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-83943 Azure API Center Information Disclosure Vulnerability Published on: October 08, 2026 <p>Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.</p> Read Details
CVE-2026-83947 Azure Event Grid Spoofing Vulnerability Published on: October 08, 2026 <p>Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.</p> Read Details
CVE-2026-88131 Microsoft Dataverse Remote Code Execution Vulnerability Published on: October 08, 2026 <p>Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.</p> Read Details
CVE-2026-94510 Microsoft Bookings Elevation of Privilege Vulnerability Published on: October 08, 2026 <p>Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-96207 Microsoft Partner Center Elevation of Privilege Vulnerability Published on: October 08, 2026 <p>Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.</p> Read Details
CVE-2026-50441 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Published on: October 08, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-58528 Windows USB Audio Class Driver Information Disclosure Vulnerability Published on: October 08, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69581 Windows Device Association Service Elevation of Privilege Vulnerability Published on: October 08, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69270 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Published on: October 08, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-77904 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Published on: October 08, 2026 Updated an acknowledgement. This is an informational change only. Read Details
Chromium: CVE-2025-11215 Off by one error in V8 Published on: October 08, 2026 Information published. Read Details
Chromium: CVE-2025-11219 Use after free in V8 Published on: October 08, 2026 Information published. Read Details
CVE-2026-69436 Windows State Repository Service Elevation of Privilege Vulnerability Published on: October 07, 2026 Updated CVE title. This is an informational change only. Read Details
Chromium: CVE-2025-0611 Object corruption in V8 Published on: October 07, 2026 Information published. Read Details
CVE-2026-69582 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-71343 Windows Remote Access Connection Manager Remote Code Execution Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-78501 Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69265 Windows NTFS Elevation of Privilege Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69844 Windows Win32k Elevation of Privilege Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-72999 Windows USB Hub Driver Elevation of Privilege Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-73009 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-61927 Windows Bind Filter Driver Elevation of Privilege Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62698 Microsoft Digest Authentication Elevation of Privilege Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability Published on: October 06, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69267 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability Published on: October 05, 2026 Updated an acknowledgement. This is an informational change only. Read Details
Chromium: CVE-2025-1920 Type Confusion in V8 Published on: October 04, 2026 Information published. Read Details
Chromium: CVE-2025-2137 Out of bounds read in V8 Published on: October 04, 2026 Information published. Read Details
Chromium: CVE-2025-10502 Heap buffer overflow in ANGLE Published on: October 03, 2026 Information published. Read Details
CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege Vulnerability Published on: October 02, 2026 Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network. Read Details
CVE-2026-69451 Windows Management Instrumentation Elevation of Privilege Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69504 Windows NTFS Information Disclosure Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69605 Microsoft Install Service Elevation of Privilege Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70562 Windows Audio Service Elevation of Privilege Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-70125 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: September 30, 2026 CWE added. Informational change only. Read Details
CVE-2026-69288 Windows GDI+ Information Disclosure Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69328 Windows Storage Elevation of Privilege Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69586 Microsoft Windows PDF Remote Code Execution Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability Published on: September 30, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62694 Windows Installer Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69307 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
Chromium CVE-2026-91728: Integer overflow Published on: September 29, 2026 Information published. Read Details
Chromium CVE-2026-91745: Use after free Published on: September 29, 2026 Information published. Read Details
CVE-2026-56172 Windows VHD miniport driver Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-68880 Windows Win32k Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability Published on: September 29, 2026 Security Updates table updated. Read Details
CVE-2026-61930 Windows Kernel Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62755 Windows DHCP Client Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-50332 Windows Kernel Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-50357 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-50375 DirectX Graphics Kernel Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-50414 Windows Media Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-57095 Win32k Elevation of Privilege Vulnerability Published on: September 29, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability Published on: September 28, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability Published on: September 25, 2026 Security Updates table updated provide links to the KB articles and download center updates. Microsoft recommends installing the updates. Read Details
CVE-2026-78510 Microsoft Outlook and Word Remote Code Execution Vulnerability Published on: September 25, 2026 Updated CVE title and CVSS Score. This is an informational change only. Read Details
CVE-2026-85921 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Published on: September 25, 2026 Updated an acknowledgement. This is an informational change only. Read Details
Chromium CVE-2026-87489: Memory corruption in V8 Published on: September 25, 2026 Information published. Read Details
Chromium CVE-2026-87536: Use after free in V8 Published on: September 25, 2026 Information published. Read Details
Chromium CVE-2026-87601: Race condition in V8 Published on: September 25, 2026 Information published. Read Details
Chromium CVE-2026-87612: Type confusion in V8 Published on: September 25, 2026 Information published. Read Details
Chromium CVE-2026-87625: Use after free in V8 Published on: September 25, 2026 Information published. Read Details
Chromium CVE-2026-95274: Improper output encoding in DevTools Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95275: Incorrect reference resolution in MediaStream Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95276: Improper input validation in Themes Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95277: Use after free in Views Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95278: Missing authorization in WakeLock Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95279: UI misrepresentation in Omnibox Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95280: Race condition in V8 Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95281: Buffer overflow in ANGLE Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95282: Use after free in Platform Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95283: Buffer overflow in Tint Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95284: Buffer overflow in ANGLE Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95285: Missing authorization in WebView Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95286: Type confusion in Bindings Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95287: Missing authorization in Navigation Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95288: UI misrepresentation in Mobile Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95289: Incorrect authorization in Scroll Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95290: Missing authorization in NFC Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95291: UI misrepresentation in SecurityIndicators Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95292: Incorrect authorization in Safebrowsing Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95293: Uninitialized resource in GPU Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95294: UI misrepresentation in Browser Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95295: Information leak in Mobile Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95296: Missing authorization in Core Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95297: Missing authorization in Contextual Tasks Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95298: Use after free in Browser Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95374: Incorrect authorization in Network Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95375: Incorrect authorization in BrowserTag Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95376: Externally controlled reference in DevTools Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95380: Type confusion in V8 Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95381: Improper input validation in Printing Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95382: Improper input validation in Auth Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95384: Race condition in Transactions Platform Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95385: Inappropriate implementation in PlatformIntegration Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
CVE-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability Published on: September 25, 2026 Security Updates table updated provide links to the KB articles and download center updates. Microsoft recommends installing the updates. Read Details
CVE-2026-69304 ASP.NET Core Denial of Service Vulnerability Published on: September 25, 2026 Security Updates table updated provide links to the KB articles and download center updates. Microsoft recommends installing the updates. Read Details
CVE-2026-71328 .NET and Visual Studio Remote Code Execution Vulnerability Published on: September 25, 2026 Security Updates table updated provide links to the KB articles and download center updates. Microsoft recommends installing the updates. Read Details
CVE-2026-69806 .NET Elevation of Privilege Vulnerability Published on: September 25, 2026 Security Updates table updated provide links to the KB articles and download center updates. Microsoft recommends installing the updates. Read Details
Chromium CVE-2026-95299: Use after free in GPU Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95300: Missing authorization in DevTools Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95301: Missing authorization in Extensions Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95302: Incorrect authorization in WebAPKs Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95303: Incomplete cleanup in SmartCard Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95304: Out of bounds write in V8 Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95305: UI misrepresentation in Chromoting Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95306: Type confusion in V8 Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95307: UI misrepresentation in ExtensionsMenu Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95308: Integer overflow in Metrics Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95309: UI misrepresentation in Mobile Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95310: Use after free in AdFilter Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95311: Free of non-heap memory in Fonts Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95312: Information leak in Passwords Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95313: Use after free in Fullscreen Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95314: Incorrect authorization in HID Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95315: Use after free in Aura Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95316: Unchecked return value in Performance Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95317: Incorrect authorization in MediaCapture Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95318: Buffer overflow in Video Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95319: Use after free in Printing Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95320: Missing authorization in Navigation Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95321: UI misrepresentation in Payments Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95322: Out of bounds write in GPU Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95323: UI misrepresentation in Chromium Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95324: Uninitialized resource in GPU Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95325: Use after free in ANGLE Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95326: Incomplete cleanup in Bluetooth Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95327: Information leak in Networking Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95328: Confused deputy in Mobile Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95329: Out of bounds write in WebGL Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95330: Improper state validation in Downloads Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95331: Out of bounds write in ANGLE Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95332: Use of uninitialized variable in Tint Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95333: Use after free in Metrics Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95334: Incorrect reference resolution in WebProtect Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95335: Use after free in HID Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95336: Information leak in Transactions Platform Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95337: UI misrepresentation in Messages Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95338: Use after free in PDFium Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95339: Use after free in ServiceWorker Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95340: Incorrect authorization in PictureInPicture Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95341: Improper input validation in Desktop Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95342: Missing authorization in V8 Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95343: Use after free in WebAudio Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95344: Race condition in DevTools Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95345: Use after free in Actor Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95346: UI misrepresentation in Chromoting Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95347: Use after free in Updater Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95348: Use after free in Bluetooth Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95349: Buffer overflow in WebGL Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95350: Buffer overflow in ANGLE Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95351: Use after free in Views Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95352: Incorrect authorization in DevTools Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95353: Use after free in Bindings Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95354: Use after free in Verifier Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95355: Incorrect authorization in Navigation Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95356: Use after free in WindowDialog Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95357: Out of bounds write in GPU Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95358: Incorrect authorization in Mobile Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95359: Uninitialized resource in GPU Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95360: Race condition in Editing Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95361: Confused deputy in DevTools Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95362: Cross-site request forgery in DevTools Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95363: UI misrepresentation in FileSystem Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95364: Improper input validation in Passwords Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95365: Type confusion in IndexedDB Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95366: Use of released resource in Core Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95367: Information leak in DataTransfer Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95368: Incorrect authorization in DevTools Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95369: Inappropriate implementation in XML Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95370: Inappropriate implementation in NFC Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95371: Missing authorization in Views Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95372: Use after free in Chromecast Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
Chromium CVE-2026-95373: Use after free in DevTools Published on: September 25, 2026 This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Read Details
CVE-2026-100208 Microsoft Office Outlook Remote Code Execution Vulnerability Published on: September 25, 2026 Information published. This CVE was addressed by updates that were released in August 2026, but the CVE was inadvertently omitted from the August 2026 Security Updates. This is an informational change only. Customers who have already installed the August 2026 updates do not need to take any further action. Read Details
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability Published on: September 25, 2026 As of 9/25/2026, Microsoft had reliable evidence of observed attacks against exploitation of this vulnerability. Read Details
CVE-2026-100206 Microsoft Office Information Disclosure Vulnerability Published on: September 25, 2026 Information published. This CVE was addressed by updates that were released in July 2026, but the CVE was inadvertently omitted from the July 2026 Security Updates. This is an informational change only. Customers who have already installed the July 2026 updates do not need to take any further action. Read Details
CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability Published on: September 25, 2026 Updated product information in the Software Update table. This is an informational change only. Read Details
Chromium: CVE-2025-2135 Type Confusion in V8 Published on: September 25, 2026 Information published. Read Details
Chromium: CVE-2026-4450 Out of bounds write in V8 Published on: September 25, 2026 Information published. Read Details
CVE-2026-69681 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-71337 Windows Storage Management Provider Elevation of Privilege Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69282 Microsoft Office SharePoint Remote Code Execution Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-81357 Visual Studio Code Security Feature Bypass Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
Chromium CVE-2026-87564: Type confusion in V8 Published on: September 24, 2026 Information published. Read Details
CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69637 Windows DHCP Server Denial of Service Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69803 Windows DHCP Server Information Disclosure Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69409 Microsoft Office SharePoint Information Disclosure Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-80073 Microsoft Office Outlook Information Disclosure Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-81951 Microsoft Excel Remote Code Execution Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
Chromium CVE-2026-87587: Use after free in V8 Published on: September 24, 2026 Information published. Read Details
CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability Published on: September 24, 2026 Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only. Read Details
CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability Published on: September 24, 2026 Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only. Read Details
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability Published on: September 24, 2026 Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only. Read Details
CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability Published on: September 24, 2026 Updated an acknowledgement. This is an informational change only. Read Details
Chromium CVE-2026-87489: Memory corruption in V8 Published on: September 23, 2026 Information published. Read Details
Chromium CVE-2026-87536: Use after free in V8 Published on: September 23, 2026 Information published. Read Details
Chromium CVE-2026-87564: Type confusion in V8 Published on: September 23, 2026 Information published. Read Details
Chromium CVE-2026-87601: Race condition in V8 Published on: September 23, 2026 Information published. Read Details
Chromium CVE-2026-87612: Type confusion in V8 Published on: September 23, 2026 Information published. Read Details
Chromium CVE-2026-87625: Use after free in V8 Published on: September 23, 2026 Information published. Read Details
Chromium CVE-2026-87587: Use after free in V8 Published on: September 23, 2026 Information published. Read Details
CVE-2026-70125 Microsoft Outlook Remote Code Execution Vulnerability Published on: September 23, 2026 Information published. This CVE was addressed by updates that were released in September 2026, but the CVE was inadvertently omitted from the September 2026 Security Updates. This is an informational change only. Customers who have already installed the September 2026 updates do not need to take any further action. Read Details
CVE-2026-57099 ASP.NET Core Denial of Service Vulnerability Published on: September 22, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-77886 Windows DHCP Server Denial of Service Vulnerability Published on: September 22, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Published on: September 22, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69498 Windows Win32k Elevation of Privilege Vulnerability Published on: September 22, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69572 Windows SMB Client Information Disclosure Vulnerability Published on: September 22, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-69620 Windows DHCP Server Remote Code Execution Vulnerability Published on: September 22, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-55134 Microsoft Word Remote Code Execution Vulnerability Published on: September 22, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability Published on: September 22, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-77901 Microsoft Office Word Remote Code Execution Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-78526 Microsoft Office Word Remote Code Execution Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-62871 .NET Elevation of Privilege Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-63532 Microsoft Office Remote Code Execution Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-68798 Microsoft Excel Remote Code Execution Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-40400 Windows PowerShell Remote Code Execution Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-55039 Microsoft Excel Remote Code Execution Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details
CVE-2026-55123 Microsoft PowerPoint Remote Code Execution Vulnerability Published on: September 21, 2026 Updated an acknowledgement. This is an informational change only. Read Details