# Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

> Source: <https://www.bleepingcomputer.com/news/microsoft/microsoft-september-2026-patch-tuesday-fixes-966-flaws-2-zero-days/>
> Published: 2026-09-08 20:03:25+00:00

Today is Microsoft's September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two actively exploited zero-day vulnerabilities.

This Patch Tuesday addresses 105 "Critical" vulnerabilities, 81 of which are remote code execution, 20 are elevation of privileges, 2 are information disclosure, and 1 security feature bypass.

The approximate number of bugs in each vulnerability category is listed below:

- 438 Elevation of Privilege Vulnerabilities
- 19 Security Feature Bypass Vulnerabilities
- 258 Remote Code Execution Vulnerabilities
- 173 Information Disclosure Vulnerabilities
- 56 Denial of Service Vulnerabilities
- 16 Spoofing Vulnerabilities

When BleepingComputer reports on Patch Tuesday security updates, we only count vulnerabilities released by Microsoft on Patch Tuesday itself.

Therefore, today's total does not include 204 flaws fixed earlier this month, including vulnerabilities in Azure AI Language, Azure Cosmos DB, Copilot Studio, Entra ID, Mariner, Microsoft Azure Active Directory B2C, Microsoft Discovery Studio, Microsoft Edge (Chromium-based), Microsoft Fabric, and Power Automate.

This Patch Tuesday is Microsoft's largest security update ever, marking a significant increase over other recent massive releases, including the [570 security flaws fixed in July](https://www.bleepingcomputer.com/news/microsoft/microsoft-july-2026-patch-tuesday-fixes-massive-570-flaws-3-zero-days/) and [400 fixed in August](https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2026-patch-tuesday-fixes-400-flaws-3-zero-days/).

The increase in Patch Tuesday security updates comes after Microsoft began [using an AI-powered vulnerability discovery system](https://www.bleepingcomputer.com/news/microsoft/microsoft-expects-more-windows-security-updates-from-ai-discovered-flaws/) to identify more security flaws across its software products.

To learn more about the non-security updates released today, you can review our dedicated articles on the [Windows 11 KB5124008 & KB5122880 cumulative updates](https://www.bleepingcomputer.com/news/microsoft/windows-11-cumulative-updates-kb5124008-and-kb5122880-released/) and the [Windows 10 KB5122878 extended security update](https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5122878-extended-security-update/).

## Microsoft patches 2 zero-days

This month's Patch Tuesday fixes two actively exploited zero-day vulnerabilities.

Microsoft [classifies a zero-day flaw](https://learn.microsoft.com/en-us/defender-vulnerability-management/tvm-zero-day-vulnerabilities) as publicly disclosed or actively exploited while no official fix is available.

The actively exploited zero-day vulnerabilities addressed during this the September 2026 Patch Tuesday are:

[CVE-2026-81963 - Windows Update Stack Elevation of Privilege Vulnerability](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81963)

Microsoft has patched an actively exploited elevation of privilege vulnerability in the Windows Update Stack that allows attackers to gain SYSTEM privileges.

"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.," warns Microsoft.

The flaws were credited to Romain Deperne and the Microsoft Threat Intelligence Centre (MSTIC).

No details have been shared on how the flaw was exploited in attacks.

[CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85880)

Microsoft has fixed a Windows Advanced Local Procedure Call (ALPC) flaw that was exploited in attacks to gain SYSTEM privileges.

"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally," explains Microsoft.

Microsoft has not shared any details on how this flaw was exploited in attacks.

The flaw were discovered by Volexity and Mark Kelly, David Galazin, Jeremy Hedges with Proofpoint

## Recent updates from other companies

Other vendors who released updates or advisories in August 2026 include:

- **Adobe**[released a security update](https://www.bleepingcomputer.com/news/security/adobe-fixes-critical-magento-zero-day-exploited-to-backdoor-servers/) for max-severity zero-day Adobe Commerce vulnerability dubbed StyleSmuggler that was[exploited in attacks to backdoor websites](https://www.bleepingcomputer.com/news/security/magento-stylesmuggler-zero-day-exploited-to-deploy-linux-backdoor/) .
- **Cisco**[released security updates](https://sec.cloudapps.cisco.com/security/center/publicationListing.x) for numerous products, including Cisco IOS XR, Cisco Nexus 9000 Series Switches, and Cisco Phones.
- **ConnectWise**[shared mitigations](https://www.bleepingcomputer.com/news/security/connectwise-warns-of-new-screenconnect-flaw-without-patch/) for a ScreenConnect Remote Access vulnerability that it plans to patch later this week.
- **CrowdStrike** warned customers to disable the Microsoft Office File Suspicious Macro Removal Windows policy setting after an[anonymous researcher released a zero-day flaw for the software](https://www.bleepingcomputer.com/news/security/new-crowdstrike-falconflank-zero-day-grants-system-privileges/) .
- **Google**[released Chrome security updates](https://www.bleepingcomputer.com/news/security/google-warns-of-new-chrome-zero-day-flaw-exploited-in-attacks/) for an actively exploited high-severity zero-day flaw in the V8 engine and 11 other vulnerabilities.
- **Hewlett Packard Enterprise (HPE)**[patched a critical RCE vulnerability](https://www.bleepingcomputer.com/news/security/hpe-patches-critical-arubaos-cx-remote-code-execution-flaw/) in the ArubaOS-CX network operating system.
- **MicroTik**[released security updates](https://www.bleepingcomputer.com/news/security/hackers-exploit-new-mikrotik-routeros-flaws-to-hijack-routers/) for two actively exploited flaws used to hijack devices over SSH.
- **N-able**[released an emergency hotfix](https://www.bleepingcomputer.com/news/security/n-able-patches-max-severity-n-central-flaw-amid-ongoing-attacks/) for a maximum-severity remote code execution (RCE) flaw affecting its N-central remote monitoring and management (RMM) platform. The flaw is believed to potentially exploited in attacks.
- **Plex**[released security updates](https://www.bleepingcomputer.com/news/security/plex-warns-users-to-patch-security-vulnerabilities-immediately/) for multiple vulnerabilities this week, urging customers to install them as soon as possible without providing any further details.
- **SAP** [released the September security updates](https://support.sap.com/en/my-support/knowledge-base/security-notes-news/september-2026.html?isu_page=1) for numerous products, including a[maximum-severity "OVERPASS" flaw](https://www.bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-overpass-kernel-vulnerability/) in the SAP Kernel code.
- **SonicWall**[released security updates](https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-actively-exploited-sma1000-zero-day-flaws/) for two SMA1000 zero-day vulnerabilities that are being chained in RCE attacks.

## The September 2026 Patch Tuesday Security Updates

Below is the complete list of resolved vulnerabilities in the September 2026 updates. Note, this report does include the flaws fixed earlier this month.

To access the full description of each vulnerability and the systems it affects, you can view the [full report here](https://www.bleepingcomputer.com/microsoft-patch-tuesday-reports/Microsoft-Patch-Tuesday-September-2026.html).

| Tag | CVE ID | CVE Title | Severity | 
|---|---|---|---|
| .NET | [CVE-2026-69805](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69805) | .NET Elevation of Privilege Vulnerability | Important | 
| .NET | [CVE-2026-58649](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-58649) | .NET Information Disclosure Vulnerability | Important | 
| .NET | [CVE-2026-69806](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69806) | .NET Elevation of Privilege Vulnerability | Important | 
| .NET and Visual Studio | [CVE-2026-69439](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69439) | .NET and Visual Studio Elevation of Privilege Vulnerability | Important | 
| Active Directory Certificate Services (AD CS) | [CVE-2026-69821](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69821) | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | Important | 
| Active Directory Certificate Services (AD CS) | [CVE-2026-69624](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69624) | Active Directory Certificate Services (AD CS) Tampering Vulnerability | Important | 
| Active Directory Certificate Services (AD CS) | [CVE-2026-62810](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62810) | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | Important | 
| Active Directory Certificate Services (AD CS) | [CVE-2026-69395](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69395) | Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability | Important | 
| Active Directory Domain Services | [CVE-2026-62762](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62762) | Windows Active Directory Domain Services Denial of Service Vulnerability | Important | 
| Active Directory Domain Services | [CVE-2026-62813](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62813) | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important | 
| Active Directory Domain Services | [CVE-2026-69809](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69809) | Windows Active Directory Domain Services Denial of Service Vulnerability | Important | 
| Active Directory Domain Services | [CVE-2026-69359](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69359) | Active Directory Domain Services Elevation of Privilege Vulnerability | Important | 
| Active Directory Domain Services | [CVE-2026-69524](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69524) | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important | 
| Active Directory Domain Services | [CVE-2026-69546](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69546) | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important | 
| Active Directory Federation Services (AD FS) | [CVE-2026-72978](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72978) | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | Important | 
| ASP.NET Core | [CVE-2026-57099](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-57099) | ASP.NET Core Denial of Service Vulnerability | Important | 
| ASP.NET Core | [CVE-2026-69304](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69304) | ASP.NET Core Denial of Service Vulnerability | Important | 
| Audio Video Control Transport Protocol | [CVE-2026-69401](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69401) | Audio Video Control Transport Protocol Elevation of Privilege Vulnerability | Important | 
| Azure AI Language | [CVE-2026-70352](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70352) | Azure AI Language Elevation of Privilege Vulnerability | Critical | 
| Azure Arc | [CVE-2026-62895](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62895) | Azure Arc SQL Server Extension Elevation of Privilege Vulnerability | Important | 
| Azure Cosmos DB | [CVE-2026-69857](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69857) | Azure Cosmos DB Spoofing Vulnerability | Critical | 
| Azure CycleCloud | [CVE-2026-77909](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77909) | Azure CycleCloud Information Disclosure Vulnerability | Important | 
| Azure HDInsights | [CVE-2026-81349](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81349) | Azure HDInsight Ambari Elevation of Privilege Vulnerability | Important | 
| BranchCache | [CVE-2026-69329](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69329) | BranchCache Denial of Service Vulnerability | Important | 
| Connected Devices Platform Service (Cdpsvc) | [CVE-2026-69516](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69516) | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | Important | 
| Copilot Studio | [CVE-2026-80098](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80098) | Copilot Studio Elevation of Privilege Vulnerability | Critical | 
| Data Sharing Service Client | [CVE-2026-73014](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73014) | Data Sharing Service Client Elevation of Privilege Vulnerability | Important | 
| Entra ID | [CVE-2026-83941](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83941) | Entra ID Elevation of Privilege Vulnerability | Critical | 
| GitHub Copilot and Visual Studio Code | [CVE-2026-81381](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81381) | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Important | 
| GitHub Copilot and Visual Studio Code | [CVE-2026-81380](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81380) | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Important | 
| Graphic Fonts | [CVE-2026-69576](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69576) | Graphic Fonts Elevation of Privilege Vulnerability | Important | 
| Graphic Fonts | [CVE-2026-72986](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72986) | Graphic Fonts Remote Code Execution Vulnerability | Critical | 
| Graphic Fonts | [CVE-2026-73018](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73018) | Graphic Fonts Remote Code Execution Vulnerability | Critical | 
| HID class driver | [CVE-2026-69731](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69731) | HID Class Driver Elevation of Privilege Vulnerability | Important | 
| Internet Storage Name Service | [CVE-2026-68895](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68895) | Internet Storage Name Service Information Disclosure Vulnerability | Important | 
| IP Helper | [CVE-2026-72981](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72981) | IP Helper Remote Code Execution Vulnerability | Critical | 
| Kernel Streaming WOW Thunk Service Driver | [CVE-2026-69275](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69275) | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | Important | 
| Kernel Streaming WOW Thunk Service Driver | [CVE-2026-69900](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69900) | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | Important | 
| Mariner | [CVE-2026-80737](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80737) | serial: amba-pl011: synchronize DMA teardown | Moderate | 
| Mariner | [CVE-2026-80733](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80733) | net: remove WARN_ON_ONCE() from sk_mc_loop() | Moderate | 
| Mariner | [CVE-2026-80732](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80732) | ata: pata_sl82c105: fix bridge revision use-after-free | Moderate | 
| Mariner | [CVE-2026-80738](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80738) | bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie | Moderate | 
| Mariner | [CVE-2026-80743](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80743) | ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers | Moderate | 
| Mariner | [CVE-2026-80742](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80742) | af_packet: Don't send zero-byte data in tpacket_snd(). | Moderate | 
| Mariner | [CVE-2026-80744](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80744) | netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path | Low | 
| Mariner | [CVE-2026-80731](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80731) | net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header | Moderate | 
| Mariner | [CVE-2026-78607](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78607) | Missing Authorization in Elasticsearch Leading to Information Disclosure | Moderate | 
| Mariner | [CVE-2026-78662](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78662) | Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh | Moderate | 
| Mariner | [CVE-2026-80757](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80757) | selinux: reject a class permission count below its inherited common | Moderate | 
| Mariner | [CVE-2026-78410](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78410) | Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection | Important | 
| Mariner | [CVE-2026-80728](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80728) | Revert "drm/amdgpu: fix aperture mapping leak" | Moderate | 
| Mariner | [CVE-2026-80730](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80730) | ring-buffer: Fix crash passing ERR_PTR to kthread_stop() | Moderate | 
| Mariner | [CVE-2026-78689](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78689) | NGINX ngx_http_js_module vulnerablility | Important | 
| Mariner | [CVE-2026-80726](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80726) | KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page | Moderate | 
| Mariner | [CVE-2026-80747](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80747) | drm/amdkfd: Add bounds check for CRAT subtype length | Moderate | 
| Mariner | [CVE-2026-80767](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80767) | HID: sensor: custom: Fix use-after-free in enable_sensor | Moderate | 
| Mariner | [CVE-2026-80768](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80768) | HID: ft260: fix stack-use-after-return write in I2C read race | Moderate | 
| Mariner | [CVE-2026-80783](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80783) | HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() | Moderate | 
| Mariner | [CVE-2026-80766](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80766) | HID: uclogic: fix use-after-free of inrange_timer on remove | Moderate | 
| Mariner | [CVE-2026-80772](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80772) | HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() | Moderate | 
| Mariner | [CVE-2026-80780](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80780) | HID: pidff: fix OOB write when hid->inputs is empty | Moderate | 
| Mariner | [CVE-2026-80770](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80770) | HID: nintendo: stop device IO before hid_hw_stop on probe failure | Moderate | 
| Mariner | [CVE-2026-80771](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80771) | HID: nintendo: register input device after capabilities are set | Moderate | 
| Mariner | [CVE-2026-80765](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80765) | HID: hyperv: validate initial device info bounds | Moderate | 
| Mariner | [CVE-2026-80756](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80756) | selinux: do not cancel a policy conversion that never started | Moderate | 
| Mariner | [CVE-2026-80782](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80782) | HID: magicmouse: do not keep a stale msc->input if no input is claimed | Moderate | 
| Mariner | [CVE-2026-80752](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80752) | Input: psxpad-spi - set driver data before use | Moderate | 
| Mariner | [CVE-2026-80755](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80755) | selinux: reject a permission value exceeding the class permission count | Moderate | 
| Mariner | [CVE-2026-80763](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80763) | Bluetooth: hci_event: validate LE Set CIG Parameters response | Moderate | 
| Mariner | [CVE-2026-80764](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80764) | Bluetooth: hci_event: fix LE list UAF on reset | Moderate | 
| Mariner | [CVE-2026-80761](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80761) | Bluetooth: ISO: zero the sockaddr before returning it in getname | Low | 
| Mariner | [CVE-2026-80762](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80762) | Bluetooth: hci_sync: Fix accept list UAF during suspend | Moderate | 
| Mariner | [CVE-2026-78408](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78408) | Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority | Important | 
| Mariner | [CVE-2026-31911](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-31911) | abort() in libpcap before 1.10.7 on an invalid BPF opcode | Moderate | 
| Mariner | [CVE-2026-31912](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-31912) | OOBR in libpcap before 1.10.7 | Moderate | 
| Mariner | [CVE-2026-18924](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-18924) | HTTP/2 server push UAF | Moderate | 
| Mariner | [CVE-2026-19931](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-19931) | Negotiate ambient user conn reuse | Moderate | 
| Mariner | [CVE-2026-56143](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-56143) | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service | Moderate | 
| Mariner | [CVE-2026-56855](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-56855) | Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh | Moderate | 
| Mariner | [CVE-2026-33630](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-33630) | c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP | Important | 
| Mariner | [CVE-2026-55951](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-55951) | httpc memory exhaustion via unbounded response header accumulation | Important | 
| Mariner | [CVE-2026-18743](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-18743) | Popt-devel: popt-static: short realloc in poptconfigfiletostring | Low | 
| Mariner | [CVE-2026-0799](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-0799) | OOBR and OOBW in libpcap before 1.10.7 | Important | 
| Mariner | [CVE-2026-13608](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-13608) | OpenLDAP SASL authentication bypass | Low | 
| Mariner | [CVE-2026-86144](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-86144) | In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entity injection, SSRF, or a denial of service (e.g., for an attacker-controlled internet resource that is intentionally slow). | Moderate | 
| Mariner | [CVE-2026-86145](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-86145) | PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API). | Important | 
| Mariner | [CVE-2026-18313](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-18313) | rpcapd memory leak in libpcap before 1.10.7 | Moderate | 
| Mariner | [CVE-2026-18329](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-18329) | NGINX ngx_http_js_module vulnerability | Moderate | 
| Mariner | [CVE-2026-14957](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-14957) | FIPS mode assertion failure via malicious CERT payload | Important | 
| Mariner | [CVE-2026-18238](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-18238) | OOBR in rpcap client in libpcap before 1.10.7 | Moderate | 
| Mariner | [CVE-2026-59696](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-59696) | uri_string does not bound the port component of a URI before integer conversion | Moderate | 
| Mariner | [CVE-2026-73812](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73812) | inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length | Important | 
| Mariner | [CVE-2026-74835](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-74835) | inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception | Important | 
| Mariner | [CVE-2026-73270](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73270) | httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems | Important | 
| Mariner | [CVE-2026-73276](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73276) | inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i | Important | 
| Mariner | [CVE-2026-76642](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-76642) | util-linux libmount Privilege Escalation via Failed Mount Helper | Moderate | 
| Mariner | [CVE-2026-78222](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78222) | NGINX ngx_http_js_module vulnerability | Moderate | 
| Mariner | [CVE-2026-74994](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-74994) | inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth | Moderate | 
| Mariner | [CVE-2026-75538](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-75538) | A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer | Important | 
| Mariner | [CVE-2026-72649](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72649) | Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution | Important | 
| Mariner | [CVE-2026-66357](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66357) | inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation | Important | 
| Mariner | [CVE-2026-66835](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66835) | httpd mod_auth directory protection bypassed by a doubled slash in the request path | Important | 
| Mariner | [CVE-2026-6244](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-6244) | division by zero in libpcap before 1.10.7 | Moderate | 
| Mariner | [CVE-2026-6554](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-6554) | infinte loop in libpcap before 1.10.7 | Moderate | 
| Mariner | [CVE-2026-71380](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71380) | httpd applies no timeout while receiving a request body, parking a worker on a stalled client | Important | 
| Mariner | [CVE-2026-71562](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71562) | httpc does not bound server-supplied numeric header values before integer conversion | Moderate | 
| Mariner | [CVE-2026-69664](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69664) | httpd parks a request worker indefinitely on a malformed chunk size sent after the headers | Important | 
| Mariner | [CVE-2026-70409](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70409) | eldap does not bound the port component of a referral URL before integer conversion | Moderate | 
| Mariner | [CVE-2026-80784](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80784) | mptcp: pm: fix memory leak from alloc-during-teardown race | Low | 
| Mariner | [CVE-2026-82208](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-82208) | wolfSSL CA-cache hit overrides callback | Important | 
| Mariner | [CVE-2026-83605](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83605) | xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed | Important | 
| Mariner | [CVE-2026-83607](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83607) | xmldom: Element name injection via createElement() bypasses requireWellFormed | Important | 
| Mariner | [CVE-2026-80910](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80910) | ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses | Low | 
| Mariner | [CVE-2026-80912](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80912) | selinux: reject an unclaimed class value in security_get_classes() | Moderate | 
| Mariner | [CVE-2026-80913](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80913) | selinux: require every boolean value to be defined | Moderate | 
| Mariner | [CVE-2026-83613](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83613) | xmldom: Quadratic-time attribute deduplication | Important | 
| Mariner | [CVE-2026-83614](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83614) | xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge | Important | 
| Mariner | [CVE-2026-83615](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83615) | xmldom: Quadratic-memory consumption | Important | 
| Mariner | [CVE-2026-83608](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83608) | xmldom: DocType `name` Injection Bypasses requireWellFormed | Important | 
| Mariner | [CVE-2026-83610](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83610) | xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization | Moderate | 
| Mariner | [CVE-2026-83611](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83611) | xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content | Moderate | 
| Mariner | [CVE-2026-80909](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80909) | drm/amdgpu: Reject UVD message with invalid number of h265 refs | Important | 
| Mariner | [CVE-2026-80888](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80888) | drm/vmwgfx: drop dma_buf reference on foreign-fd prime import | Moderate | 
| Mariner | [CVE-2026-80889](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80889) | can: isotp: fix timer drain order, wakeup handling and tx_gen ordering | Low | 
| Mariner | [CVE-2026-80890](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80890) | sctp: reject stale cookies with mismatched verification tags | Moderate | 
| Mariner | [CVE-2026-80864](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80864) | RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp | Moderate | 
| Mariner | [CVE-2026-80866](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80866) | tipc: avoid busy looping in tipc_exit_net() | Moderate | 
| Mariner | [CVE-2026-80872](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80872) | ALSA: hda/tas2781: Cancel async firmware request at unbind | Moderate | 
| Mariner | [CVE-2026-80902](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80902) | dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA | Moderate | 
| Mariner | [CVE-2026-80904](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80904) | net/tls: Fail tls_sw_splice_read() after a failed async decrypt | Moderate | 
| Mariner | [CVE-2026-80905](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80905) | net: tap: fix wrong transport_header when sending VLAN-tagged frame | Moderate | 
| Mariner | [CVE-2026-80891](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80891) | KVM: s390: pci: Validate AIBV and AISB before pinning guest pages | Moderate | 
| Mariner | [CVE-2026-80892](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80892) | erofs: cap LZMA stream pool size | Low | 
| Mariner | [CVE-2026-80893](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80893) | mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() | Low | 
| Mariner | [CVE-2026-86090](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-86090) | ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers | Important | 
| Mariner | [CVE-2026-86091](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-86091) | ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler | Important | 
| Mariner | [CVE-2026-86137](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-86137) | In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. | Low | 
| Mariner | [CVE-2026-85507](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85507) | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info). | Critical | 
| Mariner | [CVE-2026-85508](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85508) | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info). | Critical | 
| Mariner | [CVE-2026-85509](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85509) | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested. | Critical | 
| Mariner | [CVE-2026-86141](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-86141) | xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking. | Low | 
| Mariner | [CVE-2026-86142](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-86142) | In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation. | Moderate | 
| Mariner | [CVE-2026-86143](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-86143) | In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback. | Moderate | 
| Mariner | [CVE-2026-86138](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-86138) | In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. | Moderate | 
| Mariner | [CVE-2026-86139](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-86139) | In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. | Moderate | 
| Mariner | [CVE-2026-86140](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-86140) | In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. | Important | 
| Mariner | [CVE-2026-85506](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85506) | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info). | Critical | 
| Mariner | [CVE-2026-84303](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84303) | gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion | Moderate | 
| Mariner | [CVE-2026-84304](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84304) | gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation | Important | 
| Mariner | [CVE-2026-84838](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84838) | Rpm: command injection in rpmuncompress via unescaped filenames passed to popen() | Important | 
| Mariner | [CVE-2026-83616](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83616) | xmldom: Processing Instruction Target Injection Bypasses requireWellFormed | Important | 
| Mariner | [CVE-2026-83619](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83619) | xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser | Important | 
| Mariner | [CVE-2026-84233](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84233) | Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames | Moderate | 
| Mariner | [CVE-2026-85396](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85396) | rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix | Important | 
| Mariner | [CVE-2026-85504](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85504) | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses. | Critical | 
| Mariner | [CVE-2026-85505](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85505) | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions). | Moderate | 
| Mariner | [CVE-2026-85062](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85062) | Colord: Slow rejection of oversized malformed color strings | Moderate | 
| Mariner | [CVE-2026-85091](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85091) | zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate | Important | 
| Mariner | [CVE-2026-85393](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85393) | node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding | Important | 
| Mariner | [CVE-2026-80863](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80863) | RDMA/rxe: Fix OOB in free_rd_atomic_resources() | Moderate | 
| Mariner | [CVE-2026-80805](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80805) | xfs: validate attr entry pointer before field access | Moderate | 
| Mariner | [CVE-2026-80806](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80806) | ext4: don't enable DAX on new encrypted files | Moderate | 
| Mariner | [CVE-2026-80807](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80807) | nilfs2: reject invalid block index in GC ioctl | Moderate | 
| Mariner | [CVE-2026-80801](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80801) | nfc: microread: validate target discovery payload lengths | Moderate | 
| Mariner | [CVE-2026-80802](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80802) | nfc: fdp: bound the device-reported read length and fix an skb leak | Moderate | 
| Mariner | [CVE-2026-80803](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80803) | nfc: digital: clamp SENSF_RES length to the destination buffer | Important | 
| Mariner | [CVE-2026-80820](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80820) | xfs: don't livelock in scrub on a circular unlinked list | Moderate | 
| Mariner | [CVE-2026-80823](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80823) | nfc: st21nfca: validate ATR_REQ length against the received frame | Important | 
| Mariner | [CVE-2026-80824](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80824) | usb: usbfs: fix use-after-free of usb_device in usbdev_release() | Moderate | 
| Mariner | [CVE-2026-80808](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80808) | ext4: stop retrying saturated xattr cache entries | Moderate | 
| Mariner | [CVE-2026-80809](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80809) | ocfs2: fix missing metadata reservation for large xattrs | Moderate | 
| Mariner | [CVE-2026-80819](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80819) | Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept | Moderate | 
| Mariner | [CVE-2026-80800](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80800) | nfc: llcp: bound the connect_sn TLV walk to the skb | Important | 
| Mariner | [CVE-2026-80790](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80790) | nvmet-fc: fix invalid free in LS IOD error path | Moderate | 
| Mariner | [CVE-2026-80791](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80791) | nvmet-auth: zero the AUTH_RECEIVE response buffer | Important | 
| Mariner | [CVE-2026-80792](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80792) | ipv6: fix use-after-free in ip6_finish_output2() | Important | 
| Mariner | [CVE-2026-80785](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80785) | fbdev: serialize mode sysfs access with lock_fb_info() | Moderate | 
| Mariner | [CVE-2026-80788](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80788) | nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations | Important | 
| Mariner | [CVE-2026-80789](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80789) | nvmet-tcp: bound SGL data length before allocating command buffers | Important | 
| Mariner | [CVE-2026-80797](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80797) | nfc: pn533: purge fragmented skbs during cleanup | Low | 
| Mariner | [CVE-2026-80798](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80798) | nfc: llcp: reject PDUs shorter than the LLCP header | Important | 
| Mariner | [CVE-2026-80799](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80799) | nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers | Important | 
| Mariner | [CVE-2026-80793](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80793) | ipv4: reject undersized MTUs in ip_do_fragment() | Moderate | 
| Mariner | [CVE-2026-80794](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80794) | nfc: nci: fix uninit-value in the RF discover/activated NTF handlers | Moderate | 
| Mariner | [CVE-2026-80796](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80796) | nfc: nci: add data_len bound checks to activation parameter extractors | Moderate | 
| Mariner | [CVE-2026-80846](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80846) | xfrm: drop ESP-in-TCP packets with no ingress device | Moderate | 
| Mariner | [CVE-2026-80847](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80847) | tcp: clamp route advmss to TCP_MIN_MSS | Moderate | 
| Mariner | [CVE-2026-80848](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80848) | xfrm: espintcp: fix UAF during close | Moderate | 
| Mariner | [CVE-2026-80842](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80842) | net: bridge: mcast: fix use-after-free of a master VLAN's multicast context | Moderate | 
| Mariner | [CVE-2026-80843](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80843) | xfrm: fix xfrm_state_construct() auth-trunc leak | Low | 
| Mariner | [CVE-2026-80844](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80844) | xfrm: ah6: validate routing header segments_left | Moderate | 
| Mariner | [CVE-2026-80855](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80855) | fuse: fix invalidate lock leak on open O_TRUNC DAX failure | Moderate | 
| Mariner | [CVE-2026-80856](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80856) | fuse: fix invalidate lock leak on setattr writeback failure | Moderate | 
| Mariner | [CVE-2026-80861](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80861) | usb: xhci: bail out of setup if the controller is inaccessible | Moderate | 
| Mariner | [CVE-2026-80851](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80851) | gtp: serialize PDP context updates | Moderate | 
| Mariner | [CVE-2026-80852](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80852) | tls: device: fix out-of-bounds write in tls_append_frag() | Moderate | 
| Mariner | [CVE-2026-80854](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80854) | usb: gadget: f_tcm: keep port count until LUN teardown completes | Moderate | 
| Mariner | [CVE-2026-80841](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80841) | net/packet: defer vmalloc TX_RING free until skbs finish | Moderate | 
| Mariner | [CVE-2026-80829](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80829) | ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() | Moderate | 
| Mariner | [CVE-2026-80830](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80830) | usb: core: Add lock to usb_wakeup_notification() | Moderate | 
| Mariner | [CVE-2026-80831](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80831) | crypto: mxs-dcp - fix source scatterlist length access | Moderate | 
| Mariner | [CVE-2026-80826](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80826) | USB: c67x00: fix use-after-free in c67x00_add_iso_urb() | Moderate | 
| Mariner | [CVE-2026-80827](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80827) | USB: serial: option: fix slab OOB read in interrupt URB callback | Low | 
| Mariner | [CVE-2026-80828](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80828) | ALSA: usb-audio: Complete cleanup after system-resume errors | Moderate | 
| Mariner | [CVE-2026-80836](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80836) | crypto: virtio - bound the akcipher result length | Moderate | 
| Mariner | [CVE-2026-80837](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80837) | netfilter: nf_tables: don't queue packet path object notifications | Important | 
| Mariner | [CVE-2026-80840](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80840) | ipv6: seg6: clear IPv4 control block on IPIP decapsulation | Important | 
| Mariner | [CVE-2026-80832](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80832) | crypto: qce - fix CCM AAD buffer underallocation | Moderate | 
| Mariner | [CVE-2026-80833](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80833) | crypto: sun8i-ss - Remove crypto_rng interface | Moderate | 
| Mariner | [CVE-2026-80834](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80834) | crypto: sun8i-ce - Remove crypto_rng interface | Moderate | 
| Mariner | [CVE-2025-70873](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-70873) | An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file. | Important | 
| Mariner | [CVE-2026-34182](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-34182) | CMS AuthEnvelopedData Processing May Accept Forged Messages | Critical | 
| Microsoft Account | [CVE-2026-68850](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68850) | Microsoft Account Elevation of Privilege Vulnerability | Important | 
| Microsoft Account | [CVE-2026-68852](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68852) | Microsoft Account Information Disclosure Vulnerability | Important | 
| Microsoft Authentication Library (MSAL) for Node.js | [CVE-2026-84003](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84003) | Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability | Important | 
| Microsoft Authenticator | [CVE-2026-80097](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80097) | Microsoft Authenticator Elevation of Privilege Vulnerability | Important | 
| Microsoft Azure Active Directory B2C | [CVE-2026-83711](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83711) | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | Critical | 
| Microsoft Azure CLI | [CVE-2026-83948](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83948) | Microsoft Azure CLI Remote Code Execution Vulnerability | Important | 
| Microsoft COM for Windows | [CVE-2026-69294](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69294) | Microsoft COM for Windows Information Disclosure Vulnerability | Important | 
| Microsoft COM for Windows | [CVE-2026-69299](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69299) | Microsoft COM for Windows Elevation of Privilege Vulnerability | Important | 
| Microsoft Discovery Studio | [CVE-2026-62906](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62906) | Microsoft Discovery Studio Information Disclosure Vulnerability | Critical | 
| Microsoft Dynamics 365 | [CVE-2026-77908](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77908) | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Important | 
| Microsoft Dynamics 365 | [CVE-2026-65772](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-65772) | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Critical | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84335](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84335) | Chromium: CVE-2026-84335 Incorrect authorization in TabStrip | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84351](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84351) | Chromium: CVE-2026-84351 Buffer overflow in GPU | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84348](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84348) | Chromium: CVE-2026-84348 Information leak in MediaCapture | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84347](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84347) | Chromium: CVE-2026-84347 Use after free in WebRTC | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84350](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84350) | Chromium: CVE-2026-84350 Use after free in TabStrip | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84349](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84349) | Chromium: CVE-2026-84349 Use after free in Browser | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84353](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84353) | Chromium: CVE-2026-84353 Use after free in Shared Tab Groups | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84357](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84357) | Chromium: CVE-2026-84357 Improper input validation in Omnibox | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84358](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84358) | Chromium: CVE-2026-84358 Improper privilege management in Downloads | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84359](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84359) | Chromium: CVE-2026-84359 Information leak in Skia | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84354](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84354) | Chromium: CVE-2026-84354 Incorrect authorization in FileSystem | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84355](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84355) | Chromium: CVE-2026-84355 Incorrect authorization in Navigation | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84356](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84356) | Chromium: CVE-2026-84356 UI misrepresentation in FullScreen | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84327](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84327) | Chromium: CVE-2026-84327 Incorrect authorization in Autofill | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84326](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84326) | Chromium: CVE-2026-84326 Uninitialized resource in V8 | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84332](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84332) | Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84331](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84331) | Chromium: CVE-2026-84331 Incorrect authorization in Actor | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84329](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84329) | Chromium: CVE-2026-84329 Confused deputy in CredentialProvider | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84328](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84328) | Chromium: CVE-2026-84328 Missing authorization in FileSystem | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84323](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84323) | Chromium: CVE-2026-84323 Missing authorization in FileSystem | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84334](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84334) | Chromium: CVE-2026-84334 Incorrect authorization in Chromoting | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84325](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84325) | Chromium: CVE-2026-84325 Improper input validation in DataTransfer | Unknown | 
| Microsoft Edge (Chromium-based) | [CVE-2026-84324](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84324) | Chromium: CVE-2026-84324 Use after free in Proxy | Unknown | 
| Microsoft Entra ID | [CVE-2026-62916](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62916) | Microsoft Entra ID Elevation of Privilege Vulnerability | Critical | 
| Microsoft Exchange Server | [CVE-2026-69355](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69355) | Microsoft Exchange Server Remote Code Execution Vulnerability | Important | 
| Microsoft Exchange Server | [CVE-2026-69641](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69641) | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important | 
| Microsoft Exchange Server | [CVE-2026-55007](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-55007) | Microsoft Exchange Server Remote Code Execution Vulnerability | Important | 
| Microsoft Exchange Server | [CVE-2026-69356](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69356) | Microsoft Exchange Server Spoofing Vulnerability | Important | 
| Microsoft Exchange Server | [CVE-2026-69375](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69375) | Microsoft Exchange Server Tampering Vulnerability | Important | 
| Microsoft Exchange Server | [CVE-2026-69361](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69361) | Microsoft Exchange Server Spoofing Vulnerability | Important | 
| Microsoft Exchange Server | [CVE-2026-69380](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69380) | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important | 
| Microsoft Exchange Server | [CVE-2026-69382](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69382) | Microsoft Exchange Server Information Disclosure Vulnerability | Important | 
| Microsoft Exchange Server | [CVE-2026-69378](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69378) | Microsoft Exchange Server Denial of Service Vulnerability | Important | 
| Microsoft Fabric | [CVE-2026-70178](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70178) | Microsoft Fabric Elevation of Privilege Vulnerability | Critical | 
| Microsoft Graphics Component | [CVE-2026-73016](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73016) | DirectWrite Remote Code Execution Vulnerability | Important | 
| Microsoft Graphics Component | [CVE-2026-84000](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84000) | Microsoft Graphics Component Remote Code Execution Vulnerability | Important | 
| Microsoft Graphics Component | [CVE-2026-78439](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78439) | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical | 
| Microsoft Graphics Component | [CVE-2026-81955](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81955) | Windows Graphics Component Remote Code Execution Vulnerability | Critical | 
| Microsoft Graphics Component | [CVE-2026-69467](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69467) | Microsoft Graphics Component Elevation of Privilege Vulnerability | Important | 
| Microsoft Graphics Component | [CVE-2026-83990](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83990) | Microsoft Graphics Component Elevation of Privilege Vulnerability | Important | 
| Microsoft Graphics Component | [CVE-2026-73006](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73006) | DirectWrite Remote Code Execution Vulnerability | Critical | 
| Microsoft Graphics Component | [CVE-2026-77493](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77493) | Windows Graphics Component Remote Code Execution Vulnerability | Critical | 
| Microsoft Install Service | [CVE-2026-69605](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69605) | Microsoft Install Service Elevation of Privilege Vulnerability | Important | 
| Microsoft JScript | [CVE-2026-69438](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69438) | Microsoft JScript Remote Code Execution Vulnerability | Important | 
| Microsoft JScript | [CVE-2026-69325](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69325) | Microsoft JScript Remote Code Execution Vulnerability | Important | 
| Microsoft Local Security Authority Server (lsasrv) | [CVE-2026-69594](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69594) | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Important | 
| Microsoft Local Security Authority Server (lsasrv) | [CVE-2026-69365](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69365) | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Important | 
| Microsoft Local Security Authority Server (lsasrv) | [CVE-2026-69277](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69277) | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Important | 
| Microsoft Office | [CVE-2026-80091](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80091) | Microsoft Office Information Disclosure Vulnerability | Important | 
| Microsoft Office | [CVE-2026-80087](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80087) | Microsoft Office Information Disclosure Vulnerability | Important | 
| Microsoft Office | [CVE-2026-80089](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80089) | Microsoft Office Information Disclosure Vulnerability | Important | 
| Microsoft Office | [CVE-2026-69442](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69442) | Microsoft Office Remote Code Execution Vulnerability | Important | 
| Microsoft Office | [CVE-2026-69285](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69285) | Microsoft Office Remote Code Execution Vulnerability | Critical | 
| Microsoft Office | [CVE-2026-69739](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69739) | Microsoft Office Information Disclosure Vulnerability | Important | 
| Microsoft Office | [CVE-2026-78505](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78505) | Microsoft Office Remote Code Execution Vulnerability | Critical | 
| Microsoft Office | [CVE-2026-80082](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80082) | Microsoft Office Information Disclosure Vulnerability | Important | 
| Microsoft Office | [CVE-2026-64918](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-64918) | Microsoft Office Spoofing Vulnerability | Important | 
| Microsoft Office | [CVE-2026-77898](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77898) | Microsoft Office Remote Code Execution Vulnerability | Critical | 
| Microsoft Office | [CVE-2026-69632](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69632) | Microsoft Office Remote Code Execution Vulnerability | Critical | 
| Microsoft Office | [CVE-2026-78524](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78524) | Microsoft Office Remote Code Execution Vulnerability | Important | 
| Microsoft Office | [CVE-2026-69626](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69626) | Microsoft Office Information Disclosure Vulnerability | Important | 
| Microsoft Office | [CVE-2026-80076](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80076) | Microsoft Office Information Disclosure Vulnerability | Important | 
| Microsoft Office | [CVE-2026-80078](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80078) | Microsoft Office Information Disclosure Vulnerability | Important | 
| Microsoft Office Access | [CVE-2026-69778](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69778) | Microsoft Office Access Remote Code Execution Vulnerability | Important | 
| Microsoft Office Access | [CVE-2026-69477](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69477) | Microsoft Office Access Remote Code Execution Vulnerability | Important | 
| Microsoft Office Access | [CVE-2026-69529](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69529) | Microsoft Office Access Remote Code Execution Vulnerability | Important | 
| Microsoft Office Access | [CVE-2026-69614](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69614) | Microsoft Office Access Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81949](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81949) | Microsoft Excel Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Excel | [CVE-2026-81401](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81401) | Microsoft Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81948](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81948) | Microsoft Excel Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Excel | [CVE-2026-81950](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81950) | Microsoft Excel Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Excel | [CVE-2026-81947](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81947) | Microsoft Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81959](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81959) | Microsoft Excel Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Excel | [CVE-2026-81958](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81958) | Microsoft Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-85875](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85875) | Microsoft Office Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81960](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81960) | Microsoft Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81957](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81957) | Microsoft Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81953](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81953) | Microsoft Excel Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Excel | [CVE-2026-81951](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81951) | Microsoft Excel Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Excel | [CVE-2026-81956](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81956) | Microsoft Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81954](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81954) | Microsoft Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81390](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81390) | Microsoft Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81394](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81394) | Microsoft Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81391](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81391) | Microsoft Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81396](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81396) | Microsoft Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81395](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81395) | Microsoft Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81392](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81392) | Microsoft Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-72974](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72974) | Microsoft Office Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81388](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81388) | Microsoft Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81393](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81393) | Microsoft Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81386](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81386) | Microsoft Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81389](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81389) | Microsoft Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81397](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81397) | Microsoft Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81400](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81400) | Microsoft Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81398](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81398) | Microsoft Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81399](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81399) | Microsoft Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-78518](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78518) | Microsoft Office Excel Remote Code Execution Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-81387](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81387) | Microsoft Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Excel | [CVE-2026-78515](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78515) | Microsoft Office Excel Information Disclosure Vulnerability | Important | 
| Microsoft Office Outlook | [CVE-2026-78509](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78509) | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Outlook | [CVE-2026-78520](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78520) | Microsoft Office Outlook Information Disclosure Vulnerability | Critical | 
| Microsoft Office Outlook | [CVE-2026-78525](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78525) | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Outlook | [CVE-2026-78519](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78519) | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Outlook | [CVE-2026-80073](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80073) | Microsoft Office Outlook Information Disclosure Vulnerability | Important | 
| Microsoft Office Outlook | [CVE-2026-69629](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69629) | Microsoft Office Outlook Remote Code Execution Vulnerability | Important | 
| Microsoft Office Outlook | [CVE-2026-80084](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80084) | Microsoft Office Outlook Information Disclosure Vulnerability | Important | 
| Microsoft Office PowerPoint | [CVE-2026-69678](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69678) | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical | 
| Microsoft Office PowerPoint | [CVE-2026-80081](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80081) | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Important | 
| Microsoft Office PowerPoint | [CVE-2026-78513](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78513) | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 
| Microsoft Office PowerPoint | [CVE-2026-80086](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80086) | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 
| Microsoft Office PowerPoint | [CVE-2026-72938](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72938) | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 
| Microsoft Office PowerPoint | [CVE-2026-72956](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72956) | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 
| Microsoft Office PowerPoint | [CVE-2026-69797](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69797) | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical | 
| Microsoft Office PowerPoint | [CVE-2026-69767](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69767) | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical | 
| Microsoft Office PowerPoint | [CVE-2026-72977](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72977) | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 
| Microsoft Office PowerPoint | [CVE-2026-72975](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72975) | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important | 
| Microsoft Office Publisher | [CVE-2026-69742](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69742) | Microsoft Office Publisher Remote Code Execution Vulnerability | Important | 
| Microsoft Office Publisher | [CVE-2026-81385](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81385) | Microsoft Office Publisher Remote Code Execution Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69636](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69636) | Microsoft Office SharePoint Information Disclosure Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69683](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69683) | Microsoft Office SharePoint Information Disclosure Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69409](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69409) | Microsoft Office SharePoint Information Disclosure Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69402](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69402) | Microsoft Office SharePoint Spoofing Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69465](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69465) | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69724](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69724) | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69464](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69464) | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69268](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69268) | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69615](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69615) | Microsoft Office SharePoint Spoofing Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69273](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69273) | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69716](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69716) | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69690](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69690) | Microsoft Office SharePoint Spoofing Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69282](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69282) | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69417](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69417) | Microsoft Office SharePoint Spoofing Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69804](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69804) | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important | 
| Microsoft Office SharePoint | [CVE-2026-69904](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69904) | Microsoft Office SharePoint Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78526](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78526) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78521](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78521) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-69764](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69764) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78522](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78522) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-69759](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69759) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78510](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78510) | Microsoft Word Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Word | [CVE-2026-78512](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78512) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78506](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78506) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78514](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78514) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78511](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78511) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-69734](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69734) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78517](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78517) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-72976](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72976) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-72972](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72972) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-72973](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72973) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-69722](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69722) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78502](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78502) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-69671](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69671) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-69686](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69686) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-83951](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83951) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-83949](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83949) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78503](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78503) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-81952](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81952) | Microsoft Word Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Word | [CVE-2026-80085](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80085) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-80079](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80079) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-80080](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80080) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78504](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78504) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-78507](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78507) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-80088](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80088) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-80090](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80090) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-69556](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69556) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-69360](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69360) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-77901](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77901) | Microsoft Office Word Remote Code Execution Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-77504](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77504) | Microsoft Office Word Remote Code Execution Vulnerability | Critical | 
| Microsoft Office Word | [CVE-2026-77911](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77911) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-69719](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69719) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-68843](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68843) | Microsoft Office Word Information Disclosure Vulnerability | Important | 
| Microsoft Office Word | [CVE-2026-62804](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62804) | Microsoft Word Remote Code Execution Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-68889](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68889) | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-69271](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69271) | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-69376](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69376) | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-68890](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68890) | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-69269](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69269) | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-68897](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68897) | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-68892](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68892) | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-68891](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68891) | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-69345](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69345) | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-68888](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68888) | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-69336](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69336) | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-69367](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69367) | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-69313](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69313) | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-69308](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69308) | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-69824](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69824) | Microsoft Standard XPS Remote Code Execution Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-68881](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68881) | Microsoft Standard XPS Information Disclosure Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-68885](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68885) | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 
| Microsoft Standard XPS | [CVE-2026-69272](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69272) | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important | 
| Microsoft Teams for Android | [CVE-2026-69559](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69559) | Microsoft Teams for Android Information Disclosure Vulnerability | Important | 
| Microsoft Teams for Android | [CVE-2026-65812](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-65812) | Microsoft Teams for Android Information Disclosure Vulnerability | Important | 
| Microsoft Trace Data Helper | [CVE-2026-56198](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-56198) | Microsoft Trace Data Helper Elevation of Privilege Vulnerability | Important | 
| Microsoft UxTheme Library (uxtheme.dll) | [CVE-2026-69276](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69276) | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability | Important | 
| Microsoft WDAC OLE DB provider for SQL | [CVE-2026-72933](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72933) | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability | Important | 
| Microsoft WebP Image Extension | [CVE-2026-70351](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70351) | Microsoft WebP Image Extension Remote Code Execution Vulnerability | Critical | 
| Microsoft Windows Codecs Library | [CVE-2026-58600](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-58600) | HEVC Video Extensions Elevation of Privilege Vulnerability | Important | 
| Microsoft Windows Codecs Library | [CVE-2026-81353](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81353) | HEIF Image Extensions Remote Code Execution Vulnerability | Important | 
| Microsoft Windows Codecs Library | [CVE-2026-81352](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81352) | Web Media Extensions Remote Code Execution Vulnerability | Critical | 
| Microsoft Windows Codecs Library | [CVE-2026-58599](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-58599) | HEVC Video Extensions Remote Code Execution Vulnerability | Critical | 
| Microsoft Windows Media Foundation | [CVE-2026-69408](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69408) | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 
| Microsoft Windows Media Foundation | [CVE-2026-62706](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62706) | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 
| Microsoft Windows Media Foundation | [CVE-2026-69386](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69386) | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 
| Microsoft Windows Media Foundation | [CVE-2026-62744](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62744) | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 
| Microsoft Windows Media Foundation | [CVE-2026-69601](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69601) | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical | 
| Microsoft Windows Media Foundation | [CVE-2026-69511](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69511) | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 
| Microsoft Windows PDF | [CVE-2026-69586](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69586) | Microsoft Windows PDF Remote Code Execution Vulnerability | Important | 
| Microsoft Windows SCSI Class System File | [CVE-2026-78452](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78452) | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | Important | 
| Microsoft Windows SCSI Class System File | [CVE-2026-78451](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78451) | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | Important | 
| Microsoft Windows SCSI Class System File | [CVE-2026-78453](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78453) | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | Important | 
| Microsoft Windows Search Component | [CVE-2026-69453](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69453) | Microsoft Windows Search Component Tampering Vulnerability | Important | 
| Microsoft Windows Search Component | [CVE-2026-69554](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69554) | Microsoft Windows Search Component Tampering Vulnerability | Important | 
| Microsoft Windows Search Component | [CVE-2026-69305](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69305) | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 
| Microsoft Windows Search Component | [CVE-2026-69507](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69507) | Microsoft Windows Search Component Information Disclosure Vulnerability | Important | 
| Microsoft Windows Search Component | [CVE-2026-70145](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70145) | Microsoft Windows Search Component Information Disclosure Vulnerability | Important | 
| Microsoft Windows Search Component | [CVE-2026-69322](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69322) | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 
| Microsoft Windows Search Component | [CVE-2026-69585](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69585) | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 
| Microsoft Windows Search Component | [CVE-2026-68896](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68896) | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 
| Microsoft Windows Search Component | [CVE-2026-69608](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69608) | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 
| Microsoft Windows Search Component | [CVE-2026-69911](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69911) | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 
| Microsoft Windows Search Component | [CVE-2026-69600](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69600) | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important | 
| Microsoft Windows Speech | [CVE-2026-69531](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69531) | Microsoft Windows Speech Tampering Vulnerability | Important | 
| Microsoft Windows Speech | [CVE-2026-69444](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69444) | Microsoft Windows Speech Elevation of Privilege Vulnerability | Important | 
| Microsoft Windows Speech | [CVE-2026-69456](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69456) | Microsoft Windows Speech Elevation of Privilege Vulnerability | Important | 
| OpenSSH for Windows | [CVE-2026-69397](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69397) | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | Important | 
| Power Automate | [CVE-2026-65818](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-65818) | Power Automate Elevation of Privilege Vulnerability | Critical | 
| Power Automate | [CVE-2026-77897](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77897) | Microsoft Power Automate Desktop Elevation of Privilege Vulnerability | Important | 
| Push Message Routing Service | [CVE-2026-69303](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69303) | Push Message Routing Service Information Disclosure Vulnerability | Important | 
| Reliable Multicast Transport Driver (RMCAST) | [CVE-2026-78449](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78449) | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical | 
| Reliable Multicast Transport Driver (RMCAST) | [CVE-2026-78450](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78450) | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical | 
| Reliable Multicast Transport Driver (RMCAST) | [CVE-2026-69530](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69530) | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical | 
| Remote Desktop Client | [CVE-2026-69485](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69485) | Remote Desktop Client Remote Code Execution Vulnerability | Important | 
| Remote Desktop Client | [CVE-2026-69358](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69358) | Remote Desktop Client Remote Code Execution Vulnerability | Important | 
| Remote Desktop Client | [CVE-2026-80074](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80074) | Remote Desktop Client Remote Code Execution Vulnerability | Important | 
| Remote Desktop Client | [CVE-2026-68828](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68828) | Remote Desktop Client Remote Code Execution Vulnerability | Important | 
| Remote Desktop Client | [CVE-2026-83998](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83998) | Remote Desktop Client Remote Code Execution Vulnerability | Important | 
| Remote Desktop Client | [CVE-2026-78463](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78463) | Remote Desktop Client Remote Code Execution Vulnerability | Important | 
| Remote Desktop Client | [CVE-2026-77896](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77896) | Windows Remote Desktop Client Denial of Service Vulnerability | Important | 
| Remote Desktop Client | [CVE-2026-80077](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80077) | Remote Desktop Client Remote Code Execution Vulnerability | Important | 
| Remote Desktop Client | [CVE-2026-69317](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69317) | Windows Remote Desktop Client Information Disclosure Vulnerability | Important | 
| Remote Desktop Gateway Service | [CVE-2026-69292](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69292) | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | Important | 
| Remote Desktop Gateway Service | [CVE-2026-69338](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69338) | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | Important | 
| Role: DNS Server | [CVE-2026-69989](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69989) | Windows DNS Server Remote Code Execution Vulnerability | Important | 
| Role: DNS Server | [CVE-2026-69827](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69827) | Windows DNS Server Remote Code Execution Vulnerability | Critical | 
| Role: DNS Server | [CVE-2026-77505](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77505) | Windows DNS Server Remote Code Execution Vulnerability | Critical | 
| Role: DNS Server | [CVE-2026-69782](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69782) | Windows DNS Server Remote Code Execution Vulnerability | Important | 
| Role: Windows Fax Service | [CVE-2026-69621](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69621) | Role: Windows Fax Service Elevation of Privilege Vulnerability | Important | 
| Role: Windows Fax Service | [CVE-2026-72944](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72944) | Role: Windows Fax Service Elevation of Privilege Vulnerability | Important | 
| Role: Windows Fax Service | [CVE-2026-69509](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69509) | Role: Windows Fax Service Elevation of Privilege Vulnerability | Important | 
| RPC Runtime | [CVE-2026-69819](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69819) | RPC Runtime Library Remote Code Execution Vulnerability | Important | 
| Skype for Business | [CVE-2026-66308](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66308) | Skype for Business and Lync Denial of Service Vulnerability | Important | 
| Skype for Business | [CVE-2026-66302](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66302) | Skype for Business Remote Code Execution Vulnerability | Critical | 
| Skype for Business | [CVE-2026-63523](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-63523) | Skype for Business Spoofing Vulnerability | Important | 
| Skype for Business | [CVE-2026-69646](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69646) | Skype for Business Spoofing Vulnerability | Important | 
| Skype for Business | [CVE-2026-66303](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66303) | Skype for Business and Lync Denial of Service Vulnerability | Important | 
| Skype for Business | [CVE-2026-69642](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69642) | Skype for Business Spoofing Vulnerability | Important | 
| Skype for Business | [CVE-2026-66307](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66307) | Skype for Business and Lync Denial of Service Vulnerability | Important | 
| Skype for Business | [CVE-2026-66304](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66304) | Skype for Business Information Disclosure Vulnerability | Important | 
| Skype for Business | [CVE-2026-66305](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66305) | Skype for Business Spoofing Vulnerability | Important | 
| Skype for Business | [CVE-2026-66306](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66306) | Skype for Business Information Disclosure Vulnerability | Important | 
| Spring Cloud Azure | [CVE-2026-69854](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69854) | Spring Cloud Azure Elevation of Privilege Vulnerability | Critical | 
| SQL Server | [CVE-2026-67624](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67624) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-77482](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77482) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67629](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67629) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-67380](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67380) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67638](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67638) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67379](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67379) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67378](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67378) | Microsoft SQL Server Remote Code Execution Vulnerability | Critical | 
| SQL Server | [CVE-2026-67630](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67630) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-67376](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67376) | Microsoft SQL Server Denial of Service Vulnerability | Important | 
| SQL Server | [CVE-2026-67369](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67369) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-67370](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67370) | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-67383](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67383) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-67368](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67368) | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-68787](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68787) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-77481](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77481) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67373](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67373) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67639](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67639) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67388](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67388) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67389](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67389) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-67386](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67386) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-77487](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77487) | SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-67393](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67393) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-67390](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67390) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-67631](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67631) | Microsoft SQL Server Remote Code Execution Vulnerability | Critical | 
| SQL Server | [CVE-2026-77488](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77488) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-67642](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67642) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-68777](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68777) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-77485](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77485) | SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-78456](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78456) | SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-77483](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77483) | SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-77484](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77484) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67381](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67381) | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-77486](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77486) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67385](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67385) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67641](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67641) | Microsoft SQL Server Denial of Service Vulnerability | Important | 
| SQL Server | [CVE-2026-67384](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67384) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-68778](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68778) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-65669](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-65669) | Microsoft SQL Server Elevation of Privilege Vulnerability | Critical | 
| SQL Server | [CVE-2026-68785](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68785) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-67648](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67648) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-66820](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66820) | SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-67643](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67643) | Microsoft SQL Server Remote Code Execution Vulnerability | Critical | 
| SQL Server | [CVE-2026-66814](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66814) | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-47297](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-47297) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-68775](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68775) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| SQL Server | [CVE-2026-68780](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68780) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-69562](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69562) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-68776](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68776) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-68784](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68784) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-68781](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68781) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-66818](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66818) | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-66819](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66819) | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-67645](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67645) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-66816](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-66816) | Microsoft SQL Server Security Feature Bypass Vulnerability | Important | 
| SQL Server | [CVE-2026-77480](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77480) | SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-68779](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68779) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-73029](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73029) | Microsoft SQL Server Information Disclosure Vulnerability | Important | 
| SQL Server | [CVE-2026-73028](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73028) | SQL Server Elevation of Privilege Vulnerability | Important | 
| SQL Server | [CVE-2026-67636](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67636) | Microsoft SQL Server Remote Code Execution Vulnerability | Critical | 
| SQL Server | [CVE-2026-67633](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-67633) | Microsoft SQL Server Denial of Service Vulnerability | Important | 
| SQL Server | [CVE-2026-68786](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68786) | Microsoft SQL Server Remote Code Execution Vulnerability | Important | 
| Storage Port Driver | [CVE-2026-72937](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72937) | Windows Storage Port Driver Information Disclosure Vulnerability | Important | 
| Storage Port Driver | [CVE-2026-72946](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72946) | Microsoft Storage Port Driver Elevation of Privilege Vulnerability | Important | 
| Storage Port Driver | [CVE-2026-77492](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77492) | Windows Storage Port Driver Information Disclosure Vulnerability | Important | 
| Telnet Client | [CVE-2026-69431](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69431) | Telnet Client Remote Code Execution Vulnerability | Important | 
| Virtual Hard Disk (VHD) Miniport Driver | [CVE-2026-69549](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69549) | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important | 
| Virtual Hard Disk (VHD) Miniport Driver | [CVE-2026-70574](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70574) | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important | 
| Virtual Hard Disk (VHD) Miniport Driver | [CVE-2026-81355](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81355) | Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability | Critical | 
| Virtual Hard Disk (VHD) Miniport Driver | [CVE-2026-69384](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69384) | Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability | Important | 
| Virtual Hard Disk (VHD) Miniport Driver | [CVE-2026-69611](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69611) | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important | 
| Virtual Hard Disk (VHD) Miniport Driver | [CVE-2026-69541](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69541) | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important | 
| Virtual Hard Disk (VHD) Miniport Driver | [CVE-2026-69681](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69681) | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important | 
| Visual Studio | [CVE-2026-77907](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77907) | Visual Studio Remote Code Execution Vulnerability | Important | 
| Visual Studio | [CVE-2026-77906](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77906) | Visual Studio Remote Code Execution Vulnerability | Important | 
| Visual Studio | [CVE-2026-69522](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69522) | .NET and Visual Studio Remote Code Execution Vulnerability | Important | 
| Visual Studio | [CVE-2026-71328](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71328) | .NET and Visual Studio Remote Code Execution Vulnerability | Important | 
| Visual Studio Code | [CVE-2026-70334](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70334) | Visual Studio Code Security Feature Bypass Vulnerability | Important | 
| Visual Studio Code | [CVE-2026-81383](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81383) | Visual Studio Code Information Disclosure Vulnerability | Important | 
| Visual Studio Code | [CVE-2026-81379](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81379) | Visual Studio Code Security Feature Bypass Vulnerability | Important | 
| Visual Studio Code | [CVE-2026-81376](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81376) | Visual Studio Code Security Feature Bypass Vulnerability | Important | 
| Visual Studio Code | [CVE-2026-81377](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81377) | Visual Studio Code Tampering Vulnerability | Important | 
| Visual Studio Code | [CVE-2026-78461](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78461) | Visual Studio Code Security Feature Bypass Vulnerability | Important | 
| Visual Studio Code | [CVE-2026-81357](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81357) | Visual Studio Code Security Feature Bypass Vulnerability | Important | 
| Visual Studio Code | [CVE-2026-81356](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81356) | Visual Studio Code Security Feature Bypass Vulnerability | Important | 
| Visual Studio Code | [CVE-2026-78462](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78462) | Visual Studio Code Security Feature Bypass Vulnerability | Important | 
| Visual Studio Code | [CVE-2026-81378](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81378) | Visual Studio Code Security Feature Bypass Vulnerability | Important | 
| Volume Manager Driver | [CVE-2026-69407](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69407) | Volume Manager Driver Elevation of Privilege Vulnerability | Important | 
| Volume Manager Driver | [CVE-2026-69418](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69418) | Volume Manager Driver Elevation of Privilege Vulnerability | Important | 
| Volume Manager Driver | [CVE-2026-69432](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69432) | Volume Manager Driver Elevation of Privilege Vulnerability | Important | 
| Windows Accounts Control | [CVE-2026-69654](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69654) | Windows Accounts Control Elevation of Privilege Vulnerability | Important | 
| Windows Accounts Control | [CVE-2026-69816](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69816) | Windows Accounts Control Elevation of Privilege Vulnerability | Important | 
| Windows AF_UNIX Socket Provider | [CVE-2026-70565](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70565) | Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability | Important | 
| Windows ALPC | [CVE-2026-85880](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85880) | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Important | 
| Windows ALPC | [CVE-2026-69874](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69874) | Windows ALPC Elevation of Privilege Vulnerability | Critical | 
| Windows ALPC | [CVE-2026-69834](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69834) | Windows ALPC Elevation of Privilege Vulnerability | Important | 
| Windows Ancillary Function Driver for WinSock | [CVE-2026-50349](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-50349) | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important | 
| Windows Ancillary Function Driver for WinSock | [CVE-2026-70342](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70342) | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important | 
| Windows Audio Service | [CVE-2026-69311](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69311) | Windows Audio Service Elevation of Privilege Vulnerability | Important | 
| Windows Audio Service | [CVE-2026-69394](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69394) | Windows Audio Service Elevation of Privilege Vulnerability | Important | 
| Windows Audio Service | [CVE-2026-70562](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70562) | Windows Audio Service Elevation of Privilege Vulnerability | Important | 
| Windows Audio Service | [CVE-2026-69447](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69447) | Windows Audio Service Elevation of Privilege Vulnerability | Important | 
| Windows Audio Service | [CVE-2026-69801](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69801) | Windows Audio Service Elevation of Privilege Vulnerability | Important | 
| Windows Audio Service | [CVE-2026-69604](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69604) | Windows Audio Service Elevation of Privilege Vulnerability | Important | 
| Windows Audio Service | [CVE-2026-69540](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69540) | Windows Audio Service Elevation of Privilege Vulnerability | Important | 
| Windows Audio Service | [CVE-2026-69692](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69692) | Windows Audio Service Elevation of Privilege Vulnerability | Important | 
| Windows Authentication Methods | [CVE-2026-73005](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73005) | Windows Authentication Methods Elevation of Privilege Vulnerability | Important | 
| Windows Autopilot | [CVE-2026-73004](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73004) | Windows Autopilot Tampering Vulnerability | Important | 
| Windows Bind Filter Driver | [CVE-2026-68825](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68825) | Windows Bind Filter Driver Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83981](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83981) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69589](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69589) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83985](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83985) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83982](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83982) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83975](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83975) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69583](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69583) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83979](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83979) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83976](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83976) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69580](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69580) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69773](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69773) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83983](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83983) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69352](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69352) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-70572](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70572) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-70573](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70573) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83980](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83980) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83977](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83977) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-73011](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73011) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83978](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83978) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-73008](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73008) | Windows Biometric Service Information Disclosure Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-72941](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72941) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83987](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83987) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83986](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83986) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-70581](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70581) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-73007](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73007) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83988](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83988) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69593](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69593) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69738](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69738) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69293](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69293) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83954](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83954) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69727](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69727) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-78448](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78448) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69298](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69298) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69323](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69323) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-73001](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73001) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83967](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83967) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83955](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83955) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-72997](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72997) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-73000](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73000) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-73026](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73026) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-72994](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72994) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-73021](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73021) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-72993](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72993) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-72996](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72996) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-72995](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72995) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69489](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69489) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-72988](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72988) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-73020](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73020) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69476](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69476) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-72992](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72992) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-72991](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72991) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-72990](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72990) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83971](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83971) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-73002](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73002) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-73015](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73015) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83970](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83970) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83969](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83969) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69826](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69826) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-78447](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78447) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-69787](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69787) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83968](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83968) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83973](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83973) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83972](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83972) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-83974](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83974) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows Biometric Service | [CVE-2026-77489](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77489) | Windows Biometric Service Elevation of Privilege Vulnerability | Important | 
| Windows BitLocker | [CVE-2026-69458](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69458) | Windows BitLocker Elevation of Privilege Vulnerability | Important | 
| Windows BitLocker | [CVE-2026-69449](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69449) | Windows BitLocker Remote Code Execution Vulnerability | Important | 
| Windows Bluetooth Port Driver | [CVE-2026-68849](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68849) | Windows Bluetooth Port Driver Information Disclosure Vulnerability | Important | 
| Windows Bluetooth Port Driver | [CVE-2026-69817](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69817) | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | Important | 
| Windows Bluetooth Service | [CVE-2026-69889](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69889) | Windows Bluetooth Service Elevation of Privilege Vulnerability | Important | 
| Windows Bluetooth Service | [CVE-2026-69448](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69448) | Windows Bluetooth Service Elevation of Privilege Vulnerability | Important | 
| Windows Bluetooth Service | [CVE-2026-69388](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69388) | Windows Bluetooth Service Elevation of Privilege Vulnerability | Important | 
| Windows Bluetooth Service | [CVE-2026-69398](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69398) | Windows Bluetooth Service Elevation of Privilege Vulnerability | Important | 
| Windows Boot Manager | [CVE-2026-77892](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77892) | Windows Boot Manager Elevation of Privilege Vulnerability | Important | 
| Windows Broadcast DVR User Service | [CVE-2026-69735](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69735) | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | Important | 
| Windows Broker Infrastructure Service | [CVE-2026-69391](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69391) | Windows Broker Infrastructure Service Elevation of Privilege Vulnerability | Important | 
| Windows Camera Frame Server Monitor | [CVE-2026-69542](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69542) | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | Important | 
| Windows CD-ROM Driver | [CVE-2026-78508](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78508) | Windows CD-ROM Driver Information Disclosure Vulnerability | Important | 
| Windows CD-ROM Driver | [CVE-2026-78454](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78454) | Windows CD-ROM Driver Information Disclosure Vulnerability | Important | 
| Windows CD-ROM Driver | [CVE-2026-69561](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69561) | Windows CD-ROM Driver Elevation of Privilege Vulnerability | Important | 
| Windows CD-ROM Driver | [CVE-2026-69283](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69283) | Windows CD-ROM Driver Elevation of Privilege Vulnerability | Important | 
| Windows Cloud Files Mini Filter Driver | [CVE-2026-69279](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69279) | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important | 
| Windows Cloud Files Mini Filter Driver | [CVE-2026-80093](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80093) | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important | 
| Windows Cloud Files Mini Filter Driver | [CVE-2026-83991](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83991) | Windows Cloud Files Mini Filter Driver Tampering Vulnerability | Important | 
| Windows Compressed Folder | [CVE-2026-69445](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69445) | Windows Compressed Folder Elevation of Privilege Vulnerability | Important | 
| Windows Compressed Folder | [CVE-2026-69496](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69496) | Windows Compressed Folder Remote Code Execution Vulnerability | Important | 
| Windows Compressed Folder | [CVE-2026-70019](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70019) | Windows Compressed Folder Information Disclosure Vulnerability | Important | 
| Windows Connected User Experiences and Telemetry | [CVE-2026-69625](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69625) | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important | 
| Windows Connected User Experiences and Telemetry | [CVE-2026-69267](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69267) | Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability | Important | 
| Windows Connected User Experiences and Telemetry | [CVE-2026-69470](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69470) | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important | 
| Windows Connected User Experiences and Telemetry | [CVE-2026-68847](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68847) | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important | 
| Windows Connected User Experiences and Telemetry | [CVE-2026-68824](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68824) | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important | 
| Windows Container Manager Service | [CVE-2026-69771](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69771) | Windows Container Manager Service Security Feature Bypass Vulnerability | Important | 
| Windows Core Messaging | [CVE-2026-70584](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70584) | Windows Core Messaging Elevation of Privilege Vulnerability | Important | 
| Windows Core Messaging | [CVE-2026-70583](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70583) | Windows Core Messaging Elevation of Privilege Vulnerability | Important | 
| Windows Credential Guard | [CVE-2026-70578](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70578) | Windows Credential Guard Elevation of Privilege Vulnerability | Important | 
| Windows Credential Guard | [CVE-2026-72958](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72958) | Windows Credential Guard Elevation of Privilege Vulnerability | Critical | 
| Windows Credential Providers | [CVE-2026-69814](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69814) | Windows Credential Providers Elevation of Privilege Vulnerability | Important | 
| Windows Credential Providers | [CVE-2026-69790](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69790) | Windows Credential Providers Elevation of Privilege Vulnerability | Important | 
| Windows Credential Providers | [CVE-2026-69729](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69729) | Windows Credential Providers Remote Code Execution Vulnerability | Important | 
| Windows DCOM Server | [CVE-2026-69284](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69284) | Windows DCOM Server Elevation of Privilege Vulnerability | Important | 
| Windows Defender Firewall Service | [CVE-2026-70568](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70568) | Windows Defender Firewall Service Elevation of Privilege Vulnerability | Important | 
| Windows Defender Firewall Service | [CVE-2026-68831](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68831) | Windows Defender Firewall Service Information Disclosure Vulnerability | Important | 
| Windows Deployment Services | [CVE-2026-72954](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72954) | Windows Deployment Services Remote Code Execution Vulnerability | Critical | 
| Windows Deployment Services | [CVE-2026-72943](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72943) | Windows Deployment Services Remote Code Execution Vulnerability | Important | 
| Windows Deployment Services | [CVE-2026-69607](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69607) | Windows Deployment Services Remote Code Execution Vulnerability | Important | 
| Windows Deployment Services | [CVE-2026-72957](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72957) | Windows Deployment Services Remote Code Execution Vulnerability | Critical | 
| Windows Device Association Broker service | [CVE-2026-69693](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69693) | Windows Device Association Broker Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Broker service | [CVE-2026-69314](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69314) | Windows Device Association Broker Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Service | [CVE-2026-69714](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69714) | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Service | [CVE-2026-69581](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69581) | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Service | [CVE-2026-77500](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77500) | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Service | [CVE-2026-69791](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69791) | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Service | [CVE-2026-69478](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69478) | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Service | [CVE-2026-83940](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83940) | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Service | [CVE-2026-69488](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69488) | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Service | [CVE-2026-69296](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69296) | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Service | [CVE-2026-69711](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69711) | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Service | [CVE-2026-69866](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69866) | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Association Service | [CVE-2026-69574](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69574) | Windows Device Association Service Elevation of Privilege Vulnerability | Important | 
| Windows Device Health Attestation (DHA) | [CVE-2026-69443](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69443) | Windows Device Health Attestation (DHA) Information Disclosure Vulnerability | Important | 
| Windows Devices Human Interface | [CVE-2026-69472](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69472) | Windows Devices Human Interface Elevation of Privilege Vulnerability | Important | 
| Windows DHCP Client | [CVE-2026-69781](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69781) | Windows DHCP Client Denial of Service Vulnerability | Important | 
| Windows DHCP Client | [CVE-2026-69777](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69777) | Windows DHCP Client Elevation of Privilege Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-77494](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77494) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69297](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69297) | Windows DHCP Server Information Disclosure Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-77895](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77895) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69405](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69405) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69266](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69266) | Windows DHCP Server Remote Code Execution Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69679](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69679) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69510](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69510) | Windows DHCP Server Remote Code Execution Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69416](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69416) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69547](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69547) | Windows DHCP Server Remote Code Execution Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69342](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69342) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69620](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69620) | Windows DHCP Server Remote Code Execution Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69637](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69637) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69412](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69412) | Windows DHCP Server Remote Code Execution Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69497](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69497) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69415](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69415) | Windows DHCP Server Elevation of Privilege Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-77888](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77888) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-77889](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77889) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69929](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69929) | Windows DHCP Server Information Disclosure Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-77887](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77887) | Windows DHCP Server Remote Code Execution Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69876](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69876) | Windows DHCP Server Remote Code Execution Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69878](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69878) | Windows DHCP Server Remote Code Execution Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-70124](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70124) | Windows DHCP Server Information Disclosure Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-77891](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77891) | Windows DHCP Server Remote Code Execution Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-77893](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77893) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69930](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69930) | Windows DHCP Server Information Disclosure Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-70065](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70065) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-77890](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77890) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-72979](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72979) | Windows DHCP Server Remote Code Execution Vulnerability | Critical | 
| Windows DHCP Server | [CVE-2026-77502](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77502) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69803](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69803) | Windows DHCP Server Information Disclosure Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-77498](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77498) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-77499](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77499) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-77501](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77501) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69845](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69845) | Windows DHCP Server Remote Code Execution Vulnerability | Critical | 
| Windows DHCP Server | [CVE-2026-77886](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77886) | Windows DHCP Server Denial of Service Vulnerability | Important | 
| Windows DHCP Server | [CVE-2026-69847](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69847) | Windows DHCP Server Remote Code Execution Vulnerability | Important | 
| Windows Direct Show | [CVE-2026-69715](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69715) | Windows Direct Show Remote Code Execution Vulnerability | Important | 
| Windows Display Enhancement Service | [CVE-2026-70567](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70567) | Windows Display Enhancement Service Elevation of Privilege Vulnerability | Important | 
| Windows Distributed File System (DFS) | [CVE-2026-78446](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78446) | Windows Distributed File System (DFS) Denial of Service Vulnerability | Important | 
| Windows Distributed File System (DFS) | [CVE-2026-69424](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69424) | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | Important | 
| Windows DNS | [CVE-2026-69369](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69369) | Windows DNS Information Disclosure Vulnerability | Important | 
| Windows DNS | [CVE-2026-69310](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69310) | Windows DNS Elevation of Privilege Vulnerability | Important | 
| Windows DNS | [CVE-2026-69858](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69858) | Windows DNS Server Remote Code Execution Vulnerability | Critical | 
| Windows DNS | [CVE-2026-69551](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69551) | Windows DNS Server Remote Code Execution Vulnerability | Important | 
| Windows DNS | [CVE-2026-69631](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69631) | Windows DNS Denial of Service Vulnerability | Important | 
| Windows DNS | [CVE-2026-69813](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69813) | Windows DNS Server Remote Code Execution Vulnerability | Critical | 
| Windows DNS | [CVE-2026-72928](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72928) | Windows DNS Server Remote Code Execution Vulnerability | Important | 
| Windows DNS | [CVE-2026-69730](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69730) | Windows DNS Server Remote Code Execution Vulnerability | Critical | 
| Windows DNS | [CVE-2026-72948](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72948) | Windows DNS Elevation of Privilege Vulnerability | Important | 
| Windows DNS | [CVE-2026-78523](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78523) | Windows DNS Server Denial of Service Vulnerability | Important | 
| Windows DNS | [CVE-2026-69680](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69680) | Windows DNS Spoofing Vulnerability | Important | 
| Windows DNS | [CVE-2026-69672](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69672) | Windows DNS Information Disclosure Vulnerability | Important | 
| Windows DNS | [CVE-2026-70091](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70091) | Windows DNS Denial of Service Vulnerability | Important | 
| Windows DNS | [CVE-2026-72987](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72987) | Windows DNS Remote Code Execution Vulnerability | Critical | 
| Windows DWM Core Library | [CVE-2026-69775](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69775) | Windows DWM Core Library Elevation of Privilege Vulnerability | Important | 
| Windows Embedded Mode Service | [CVE-2026-69430](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69430) | Windows Embedded Mode Service Elevation of Privilege Vulnerability | Important | 
| Windows Encrypting File System (EFS) | [CVE-2026-69841](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69841) | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | Important | 
| Windows Encrypting File System (EFS) | [CVE-2026-69688](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69688) | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | Important | 
| Windows Encrypting File System (EFS) | [CVE-2026-69794](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69794) | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | Important | 
| Windows Enterprise App Management | [CVE-2026-69907](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69907) | Windows Enterprise App Management Elevation of Privilege Vulnerability | Important | 
| Windows Enterprise App Management | [CVE-2026-69481](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69481) | Windows Enterprise App Management Elevation of Privilege Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-69362](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69362) | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-68894](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68894) | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-69896](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69896) | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-83996](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83996) | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-69436](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69436) | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-69513](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69513) | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-69462](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69462) | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-69450](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69450) | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-69684](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69684) | Windows Error Reporting Information Disclosure Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-69612](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69612) | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-69433](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69433) | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 
| Windows Error Reporting | [CVE-2026-69482](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69482) | Windows Error Reporting Tampering Vulnerability | Important | 
| Windows Event Logging Service | [CVE-2026-69495](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69495) | Windows Event Logging Service Remote Code Execution Vulnerability | Important | 
| Windows Event Logging Service | [CVE-2026-69494](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69494) | Windows Event Logging Service Remote Code Execution Vulnerability | Important | 
| Windows Event Logging Service | [CVE-2026-69493](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69493) | Windows Event Logging Service Remote Code Execution Vulnerability | Important | 
| Windows exFAT File System | [CVE-2026-69619](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69619) | Windows exFAT File System Elevation of Privilege Vulnerability | Important | 
| Windows Failover Cluster | [CVE-2026-72989](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72989) | Windows Failover Cluster Information Disclosure Vulnerability | Important | 
| Windows Failover Cluster | [CVE-2026-73010](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73010) | Microsoft Failover Cluster Remote Code Execution Vulnerability | Critical | 
| Windows Failover Cluster | [CVE-2026-71338](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71338) | Windows Failover Cluster Elevation of Privilege Vulnerability | Important | 
| Windows Failover Cluster | [CVE-2026-78444](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78444) | Microsoft Failover Cluster Remote Code Execution Vulnerability | Critical | 
| Windows Fast FAT Driver | [CVE-2026-68878](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68878) | Windows Fast FAT Driver Elevation of Privilege Vulnerability | Important | 
| Windows Fast FAT Driver | [CVE-2026-69347](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69347) | Windows Fast FAT Driver Remote Code Execution Vulnerability | Important | 
| Windows File History Service | [CVE-2026-72947](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72947) | Windows File History Service Elevation of Privilege Vulnerability | Important | 
| Windows File History Service | [CVE-2026-68837](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68837) | Windows File History Service Elevation of Privilege Vulnerability | Important | 
| Windows File History Service | [CVE-2026-71340](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71340) | Windows File History Service Elevation of Privilege Vulnerability | Important | 
| Windows GDI | [CVE-2026-77491](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77491) | Windows GDI Information Disclosure Vulnerability | Important | 
| Windows GDI+ | [CVE-2026-69288](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69288) | Windows GDI+ Information Disclosure Vulnerability | Important | 
| Windows GDI+ | [CVE-2026-68827](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68827) | Windows GDI+ Elevation of Privilege Vulnerability | Important | 
| Windows Graphics Kernel | [CVE-2026-73017](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73017) | Graphics Kernel Remote Code Execution Vulnerability | Critical | 
| Windows Group Policy | [CVE-2026-69717](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69717) | Windows Group Policy Elevation of Privilege Vulnerability | Important | 
| Windows Hello | [CVE-2026-69784](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69784) | Windows Hello Elevation of Privilege Vulnerability | Critical | 
| Windows Hello | [CVE-2026-81354](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81354) | Windows Hello Elevation of Privilege Vulnerability | Critical | 
| Windows Hello | [CVE-2026-69740](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69740) | Windows Hello Elevation of Privilege Vulnerability | Critical | 
| Windows Hello | [CVE-2026-69799](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69799) | Windows Hello Elevation of Privilege Vulnerability | Critical | 
| Windows Hello | [CVE-2026-69820](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69820) | Windows Hello Elevation of Privilege Vulnerability | Critical | 
| Windows Hello | [CVE-2026-69864](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69864) | Windows Hello Elevation of Privilege Vulnerability | Critical | 
| Windows Hello | [CVE-2026-69710](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69710) | Windows Hello Elevation of Privilege Vulnerability | Critical | 
| Windows Hello | [CVE-2026-69725](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69725) | Windows Hello Elevation of Privilege Vulnerability | Critical | 
| Windows Hello | [CVE-2026-72980](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72980) | Windows Hello Security Feature Bypass Vulnerability | Critical | 
| Windows Host Guardian Service | [CVE-2026-69682](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69682) | Windows Host Guardian Service Elevation of Privilege Vulnerability | Important | 
| Windows HTTP Print Provider | [CVE-2026-69623](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69623) | Windows HTTP Print Provider Remote Code Execution Vulnerability | Important | 
| Windows HTTP Print Provider | [CVE-2026-69769](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69769) | Windows HTTP Print Provider Remote Code Execution Vulnerability | Critical | 
| Windows HTTP.sys | [CVE-2026-69597](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69597) | Windows HTTP.sys Elevation of Privilege Vulnerability | Important | 
| Windows Hyper-V | [CVE-2026-72961](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72961) | Windows Hyper-V Elevation of Privilege Vulnerability | Critical | 
| Windows Hyper-V | [CVE-2026-69553](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69553) | Windows Hyper-V Elevation of Privilege Vulnerability | Important | 
| Windows Hyper-V | [CVE-2026-69910](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69910) | Windows Hyper-V Remote Code Execution Vulnerability | Important | 
| Windows Hyper-V | [CVE-2026-69603](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69603) | Windows Hyper-V Remote Code Execution Vulnerability | Critical | 
| Windows Hyper-V | [CVE-2026-80083](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80083) | Windows Hyper-V Remote Code Execution Vulnerability | Critical | 
| Windows IKE Extension | [CVE-2026-69587](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69587) | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | Important | 
| Windows IKE Extension | [CVE-2026-69429](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69429) | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | Important | 
| Windows IKE Extension | [CVE-2026-69881](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69881) | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | Important | 
| Windows Image Acquisition | [CVE-2026-69483](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69483) | Windows Image Acquisition Information Disclosure Vulnerability | Important | 
| Windows Image Acquisition | [CVE-2026-69500](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69500) | Windows Image Acquisition Elevation of Privilege Vulnerability | Important | 
| Windows Image Acquisition | [CVE-2026-69341](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69341) | Windows Image Acquisition Elevation of Privilege Vulnerability | Important | 
| Windows Image Acquisition | [CVE-2026-69613](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69613) | Windows Image Acquisition Elevation of Privilege Vulnerability | Important | 
| Windows Imaging Component | [CVE-2026-73023](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73023) | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 
| Windows Imaging Component | [CVE-2026-77495](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77495) | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 
| Windows Imaging Component | [CVE-2026-73013](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73013) | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 
| Windows Imaging Component | [CVE-2026-70296](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70296) | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 
| Windows Imaging Component | [CVE-2026-69860](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69860) | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 
| Windows Imaging Component | [CVE-2026-83992](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83992) | Windows Imaging Component Remote Code Execution Vulnerability | Important | 
| Windows Imaging Component | [CVE-2026-69318](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69318) | Windows Imaging Component Information Disclosure Vulnerability | Important | 
| Windows Imaging Component | [CVE-2026-69499](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69499) | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 
| Windows Installer | [CVE-2026-62694](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62694) | Windows Installer Elevation of Privilege Vulnerability | Important | 
| Windows Installer | [CVE-2026-77894](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77894) | Windows Installer Elevation of Privilege Vulnerability | Important | 
| Windows Installer | [CVE-2026-71339](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71339) | Windows Installer Elevation of Privilege Vulnerability | Important | 
| Windows Installer | [CVE-2026-69441](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69441) | Windows Installer Elevation of Privilege Vulnerability | Important | 
| Windows Installer | [CVE-2026-72929](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72929) | Windows Installer Elevation of Privilege Vulnerability | Important | 
| Windows Internet Connection Sharing (ICS) | [CVE-2026-72926](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72926) | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability | Important | 
| Windows Internet Connection Sharing (ICS) | [CVE-2026-72964](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72964) | Windows Internet Connection Sharing (ICS) Tampering Vulnerability | Important | 
| Windows Internet Connection Sharing (ICS) | [CVE-2026-72983](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72983) | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | Critical | 
| Windows IP Address Management (IPAM) Service | [CVE-2026-69694](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69694) | Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability | Important | 
| Windows iSCSI | [CVE-2026-68898](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68898) | Windows iSCSI Denial of Service Vulnerability | Important | 
| Windows iSCSI | [CVE-2026-73025](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73025) | Windows iSCSI Security Feature Bypass Vulnerability | Important | 
| Windows iSCSI | [CVE-2026-69598](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69598) | Windows iSCSI Remote Code Execution Vulnerability | Important | 
| Windows iSCSI | [CVE-2026-69628](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69628) | Windows iSCSI Remote Code Execution Vulnerability | Important | 
| Windows iSCSI Target Service | [CVE-2026-69839](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69839) | Windows iSCSI Target Service Denial of Service Vulnerability | Important | 
| Windows Kerberos | [CVE-2026-69685](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69685) | Windows Kerberos Elevation of Privilege Vulnerability | Important | 
| Windows Kerberos | [CVE-2026-69822](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69822) | Windows Kerberos Elevation of Privilege Vulnerability | Important | 
| Windows Kerberos | [CVE-2026-69760](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69760) | Windows Kerberos Denial of Service Vulnerability | Important | 
| Windows Kerberos | [CVE-2026-69676](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69676) | Windows Kerberos Remote Code Execution Vulnerability | Critical | 
| Windows Kerberos | [CVE-2026-69744](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69744) | Windows Kerberos Denial of Service Vulnerability | Important | 
| Windows Kernel | [CVE-2026-68846](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68846) | Windows Kernel Elevation of Privilege Vulnerability | Important | 
| Windows Kernel | [CVE-2026-83942](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83942) | Windows Kernel Elevation of Privilege Vulnerability | Important | 
| Windows Kernel | [CVE-2026-69669](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69669) | Windows Kernel Remote Code Execution Vulnerability | Important | 
| Windows Kernel | [CVE-2026-68884](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68884) | Windows Kernel Elevation of Privilege Vulnerability | Important | 
| Windows Kernel | [CVE-2026-85360](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85360) | Windows Kernel Elevation of Privilege Vulnerability | Important | 
| Windows Kernel | [CVE-2026-69473](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69473) | Windows Kernel Elevation of Privilege Vulnerability | Important | 
| Windows Kernel | [CVE-2026-69723](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69723) | Windows Kernel Information Disclosure Vulnerability | Important | 
| Windows Kernel | [CVE-2026-69366](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69366) | Windows Kernel Elevation of Privilege Vulnerability | Important | 
| Windows Kernel | [CVE-2026-69406](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69406) | Windows Kernel Information Disclosure Vulnerability | Important | 
| Windows Kernel | [CVE-2026-69466](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69466) | Windows Kernel Elevation of Privilege Vulnerability | Important | 
| Windows Kernel | [CVE-2026-69578](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69578) | Windows Kernel Elevation of Privilege Vulnerability | Important | 
| Windows Kernel Mode Driver | [CVE-2026-69421](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69421) | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Important | 
| Windows Key Distribution Center | [CVE-2026-69712](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69712) | Windows Key Distribution Center Remote Code Execution Vulnerability | Critical | 
| Windows Key Distribution Center | [CVE-2026-84001](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-84001) | Windows Key Distribution Center Denial of Service Vulnerability | Important | 
| Windows LDAP - Lightweight Directory Access Protocol | [CVE-2026-69428](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69428) | Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability | Important | 
| Windows License Manager | [CVE-2026-69281](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69281) | Windows License Manager Elevation of Privilege Vulnerability | Important | 
| Windows License Manager | [CVE-2026-69315](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69315) | Windows License Manager Information Disclosure Vulnerability | Important | 
| Windows Link Layer Topology Discovery Protocol | [CVE-2026-69732](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69732) | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability | Important | 
| Windows Management Instrumentation | [CVE-2026-69349](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69349) | Windows Management Instrumentation Information Disclosure Vulnerability | Important | 
| Windows Management Instrumentation | [CVE-2026-69451](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69451) | Windows Management Instrumentation Elevation of Privilege Vulnerability | Important | 
| Windows Management Instrumentation | [CVE-2026-77905](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77905) | Windows Management Instrumentation Elevation of Privilege Vulnerability | Important | 
| Windows Management Instrumentation | [CVE-2026-70582](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70582) | Windows Management Instrumentation Elevation of Privilege Vulnerability | Important | 
| Windows Management Services | [CVE-2026-73012](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73012) | Windows Management Services Elevation of Privilege Vulnerability | Important | 
| Windows Media | [CVE-2026-69891](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69891) | Windows Media Elevation of Privilege Vulnerability | Important | 
| Windows Media Player | [CVE-2026-70203](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70203) | Windows Media Player Remote Code Execution Vulnerability | Critical | 
| Windows Media Player | [CVE-2026-72960](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72960) | Windows Media Player Remote Code Execution Vulnerability | Critical | 
| Windows Message Queuing | [CVE-2026-83997](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83997) | Windows Message Queuing Remote Code Execution Vulnerability | Important | 
| Windows Message Queuing | [CVE-2026-69579](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69579) | Windows Message Queuing Remote Code Execution Vulnerability | Critical | 
| Windows Message Queuing | [CVE-2026-69645](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69645) | Windows Message Queuing Elevation of Privilege Vulnerability | Important | 
| Windows Message Queuing Queue Manager | [CVE-2026-68887](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68887) | Windows Message Queuing Queue Manager Denial of Service Vulnerability | Important | 
| Windows Message Queuing Queue Manager | [CVE-2026-72932](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72932) | Windows Message Queuing Queue Manager Information Disclosure Vulnerability | Important | 
| Windows Microsoft DirectMusic | [CVE-2026-69491](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69491) | Microsoft DirectMusic Remote Code Execution Vulnerability | Important | 
| Windows MIDI Service Module | [CVE-2026-68842](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68842) | Windows MIDI Service Module Information Disclosure Vulnerability | Important | 
| Windows MIDI Service Module | [CVE-2026-69720](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69720) | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important | 
| Windows MIDI Service Module | [CVE-2026-69339](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69339) | Windows MIDI Service Module Information Disclosure Vulnerability | Important | 
| Windows MIDI Service Module | [CVE-2026-78464](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78464) | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important | 
| Windows MIDI Service Module | [CVE-2026-69440](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69440) | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important | 
| Windows MIDI Service Module | [CVE-2026-69508](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69508) | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important | 
| Windows Mobile Broadband | [CVE-2026-70579](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70579) | Windows Mobile Broadband Information Disclosure Vulnerability | Important | 
| Windows Modern Device Management (MDM) | [CVE-2026-70577](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70577) | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important | 
| Windows Modern Device Management (MDM) | [CVE-2026-69377](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69377) | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important | 
| Windows Modern Device Management (MDM) | [CVE-2026-73003](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73003) | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important | 
| Windows Modern Device Management (MDM) | [CVE-2026-69674](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69674) | Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability | Important | 
| Windows Modern Device Management (MDM) | [CVE-2026-73022](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73022) | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important | 
| Windows Modern Device Management (MDM) | [CVE-2026-69460](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69460) | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | Important | 
| Windows Modern Execution Server | [CVE-2026-72963](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72963) | Windows Modern Execution Server Elevation of Privilege Vulnerability | Important | 
| Windows NDIS | [CVE-2026-69396](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69396) | Windows NDIS Elevation of Privilege Vulnerability | Important | 
| Windows NDIS | [CVE-2026-69357](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69357) | Windows NDIS Elevation of Privilege Vulnerability | Important | 
| Windows Netlogon | [CVE-2026-72982](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72982) | Windows Netlogon Remote Code Execution Vulnerability | Critical | 
| Windows Netlogon | [CVE-2026-62759](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62759) | Windows Netlogon Spoofing Vulnerability | Important | 
| Windows Network Connection Broker | [CVE-2026-72967](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72967) | Windows Network Connection Broker Elevation of Privilege Vulnerability | Important | 
| Windows Network Connection Broker | [CVE-2026-68886](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68886) | Windows Network Connection Broker Information Disclosure Vulnerability | Important | 
| Windows Network File System | [CVE-2026-69372](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69372) | Windows Network File System Denial of Service Vulnerability | Important | 
| Windows Network File System | [CVE-2026-69772](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69772) | Windows Network File System Remote Code Execution Vulnerability | Important | 
| Windows NFS Portmapper | [CVE-2026-71334](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71334) | Windows NFS Portmapper Elevation of Privilege Vulnerability | Important | 
| Windows Notification | [CVE-2026-69648](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69648) | Windows Notification Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-68838](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68838) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69638](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69638) | Windows NTFS Remote Code Execution Vulnerability | Important | 
| Windows NTFS | [CVE-2026-68833](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68833) | Windows NTFS Remote Code Execution Vulnerability | Important | 
| Windows NTFS | [CVE-2026-68834](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68834) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-68832](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68832) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69312](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69312) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69479](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69479) | Windows NTFS Remote Code Execution Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69505](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69505) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69504](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69504) | Windows NTFS Information Disclosure Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69463](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69463) | Windows NTFS Remote Code Execution Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69265](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69265) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69425](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69425) | Windows NTFS Tampering Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69461](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69461) | Windows NTFS Remote Code Execution Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69379](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69379) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-83995](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83995) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69567](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69567) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-68841](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68841) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69591](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69591) | Windows NTFS Information Disclosure Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69566](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69566) | Windows NTFS Remote Code Execution Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69532](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69532) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-68875](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68875) | Windows NTFS Remote Code Execution Vulnerability | Important | 
| Windows NTFS | [CVE-2026-68851](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68851) | Windows NTFS Information Disclosure Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69340](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69340) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69332](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69332) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69709](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69709) | Windows NTFS Remote Code Execution Vulnerability | Important | 
| Windows NTFS | [CVE-2026-72935](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72935) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-69875](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69875) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-77503](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77503) | Windows NTFS Elevation of Privilege Vulnerability | Important | 
| Windows NTFS | [CVE-2026-71329](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71329) | Windows NTFS Remote Code Execution Vulnerability | Important | 
| Windows OLE DB | [CVE-2026-78442](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78442) | Windows OLE DB Remote Code Execution Vulnerability | Important | 
| Windows OLE DB | [CVE-2026-78441](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78441) | Windows OLE DB Information Disclosure Vulnerability | Important | 
| Windows Online Certificate Status Protocol (OCSP) | [CVE-2026-69564](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69564) | Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability | Important | 
| Windows Overlay Filter | [CVE-2026-69474](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69474) | Windows Overlay Filter Information Disclosure Vulnerability | Important | 
| Windows Overlay Filter | [CVE-2026-69343](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69343) | Windows Overlay Filter Information Disclosure Vulnerability | Important | 
| Windows Overlay Filter | [CVE-2026-69373](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69373) | Windows Overlay Filter Elevation of Privilege Vulnerability | Important | 
| Windows Overlay Filter | [CVE-2026-69368](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69368) | Windows Overlay Filter Elevation of Privilege Vulnerability | Important | 
| Windows Overlay Filter | [CVE-2026-69371](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69371) | Windows Overlay Filter Elevation of Privilege Vulnerability | Important | 
| Windows Overlay Filter | [CVE-2026-69350](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69350) | Windows Overlay Filter Elevation of Privilege Vulnerability | Important | 
| Windows Overlay Filter | [CVE-2026-69316](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69316) | Windows Overlay Filter Information Disclosure Vulnerability | Important | 
| Windows Paint | [CVE-2026-70586](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70586) | Windows Paint Remote Code Execution Vulnerability | Critical | 
| Windows Partition Management Driver | [CVE-2026-69480](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69480) | Windows Partition Management Driver Elevation of Privilege Vulnerability | Important | 
| Windows Partition Management Driver | [CVE-2026-71341](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71341) | Windows Partition Management Driver Information Disclosure Vulnerability | Important | 
| Windows Partition Management Driver | [CVE-2026-69492](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69492) | Windows Partition Management Driver Elevation of Privilege Vulnerability | Important | 
| Windows Performance Monitor | [CVE-2026-69324](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69324) | Windows Performance Monitor Elevation of Privilege Vulnerability | Important | 
| Windows Power Dependency Coordinator | [CVE-2026-69321](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69321) | Windows Power Dependency Coordinator Tampering Vulnerability | Important | 
| Windows Power Dependency Coordinator | [CVE-2026-69459](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69459) | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | Important | 
| Windows PowerShell | [CVE-2026-62801](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62801) | Microsoft PowerShell Security Feature Bypass Vulnerability | Important | 
| Windows PowerShell | [CVE-2026-69807](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69807) | PowerShell Elevation of Privilege Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-69309](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69309) | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-69921](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69921) | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-69552](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69552) | Windows Print Spooler Components Information Disclosure Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-70564](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70564) | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-85877](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-85877) | Windows Print Spooler Remote Code Execution Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-69569](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69569) | Windows Print Spooler Components Denial of Service Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-68835](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68835) | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-68848](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68848) | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-69346](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69346) | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-69344](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69344) | Windows Print Spooler Components Information Disclosure Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-69838](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69838) | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 
| Windows Print Spooler Components | [CVE-2026-69364](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69364) | Windows Print Spooler Components Elevation of Privilege Vulnerability | Important | 
| Windows PrintWorkflowUserSvc | [CVE-2026-69602](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69602) | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Important | 
| Windows Program Compatibility Assistant Service | [CVE-2026-69534](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69534) | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important | 
| Windows Program Compatibility Assistant Service | [CVE-2026-68874](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68874) | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | Important | 
| Windows Program Compatibility Assistant Service | [CVE-2026-68845](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68845) | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important | 
| Windows Program Compatibility Assistant Service | [CVE-2026-69563](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69563) | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important | 
| Windows Program Compatibility Assistant Service | [CVE-2026-68873](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68873) | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | Important | 
| Windows Program Compatibility Assistant Service | [CVE-2026-68876](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68876) | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Important | 
| Windows Push Notifications | [CVE-2026-69300](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69300) | Windows Push Notifications Elevation of Privilege Vulnerability | Important | 
| Windows Push Notifications | [CVE-2026-62697](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-62697) | Windows Push Notifications Elevation of Privilege Vulnerability | Important | 
| Windows Push Notifications | [CVE-2026-69280](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69280) | Windows Push Notifications Elevation of Privilege Vulnerability | Important | 
| Windows Raw Image Extension | [CVE-2026-69649](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69649) | Raw Image Extension Remote Code Execution Vulnerability | Critical | 
| Windows RDP Client | [CVE-2026-57098](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-57098) | Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability | Important | 
| Windows Registry | [CVE-2026-69337](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69337) | Windows Registry Elevation of Privilege Vulnerability | Important | 
| Windows Remote Access Connection Manager | [CVE-2026-71342](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71342) | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important | 
| Windows Remote Access Connection Manager | [CVE-2026-71343](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71343) | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | Important | 
| Windows Remote Access Connection Manager | [CVE-2026-71352](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71352) | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | Important | 
| Windows Remote Access Connection Manager | [CVE-2026-69331](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69331) | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important | 
| Windows Remote Access Connection Manager | [CVE-2026-69455](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69455) | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important | 
| Windows Remote Access Connection Manager | [CVE-2026-71333](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71333) | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important | 
| Windows Remote Access Connection Manager | [CVE-2026-72966](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72966) | Windows Remote Access Connection Manager Tampering Vulnerability | Important | 
| Windows Remote Desktop | [CVE-2026-69518](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69518) | Windows Remote Desktop Remote Code Execution Vulnerability | Critical | 
| Windows Remote Desktop Licensing Service | [CVE-2026-68893](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68893) | Remote Desktop Licensing Service Elevation of Privilege Vulnerability | Important | 
| Windows Remote Desktop Licensing Service | [CVE-2026-69627](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69627) | Windows Remote Desktop Licensing Service Information Disclosure Vulnerability | Important | 
| Windows Remote Desktop Protocol | [CVE-2026-70587](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70587) | Windows Remote Desktop Protocol Information Disclosure Vulnerability | Important | 
| Windows Remote Desktop Services | [CVE-2026-80096](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80096) | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important | 
| Windows Remote Desktop Services | [CVE-2026-69475](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69475) | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important | 
| Windows Remote Desktop Services | [CVE-2026-69536](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69536) | Remote Desktop Services Remote Code Execution Vulnerability | Important | 
| Windows Remote Desktop Services | [CVE-2026-69525](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69525) | Remote Desktop Services Remote Code Execution Vulnerability | Important | 
| Windows Remote Desktop Services | [CVE-2026-69514](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69514) | Remote Desktop Services Remote Code Execution Vulnerability | Important | 
| Windows Remote Desktop Services | [CVE-2026-69539](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69539) | Remote Desktop Services Remote Code Execution Vulnerability | Important | 
| Windows Remote Desktop Services | [CVE-2026-69599](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69599) | Remote Desktop Services Remote Code Execution Vulnerability | Important | 
| Windows Remote Desktop Services | [CVE-2026-69287](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69287) | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important | 
| Windows Remote Desktop Services | [CVE-2026-69616](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69616) | Windows Remote Desktop Services Information Disclosure Vulnerability | Important | 
| Windows Resilient File System (ReFS) | [CVE-2026-69617](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69617) | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important | 
| Windows Resilient File System (ReFS) | [CVE-2026-83952](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83952) | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important | 
| Windows Resilient File System (ReFS) Deduplication Service | [CVE-2026-83999](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83999) | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability | Important | 
| Windows RNDIS | [CVE-2026-69548](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69548) | Windows RNDIS Information Disclosure Vulnerability | Important | 
| Windows RNDIS | [CVE-2026-69768](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69768) | Windows RNDIS Remote Code Execution Vulnerability | Important | 
| Windows Routing and Remote Access Service (RRAS) | [CVE-2026-71353](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71353) | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Important | 
| Windows Routing and Remote Access Service (RRAS) | [CVE-2026-72959](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72959) | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Critical | 
| Windows Routing and Remote Access Service (RRAS) | [CVE-2026-69590](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69590) | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Critical | 
| Windows Routing and Remote Access Service (RRAS) | [CVE-2026-72939](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72939) | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | Important | 
| Windows Routing and Remote Access Service (RRAS) | [CVE-2026-69852](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69852) | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Critical | 
| Windows Routing and Remote Access Service (RRAS) | [CVE-2026-71351](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71351) | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Important | 
| Windows Routing and Remote Access Service (RRAS) | [CVE-2026-72950](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72950) | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Critical | 
| Windows Routing and Remote Access Service (RRAS) | [CVE-2026-70570](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70570) | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Important | 
| Windows Schannel | [CVE-2026-72940](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72940) | Windows Schannel Remote Code Execution Vulnerability | Important | 
| Windows Schannel | [CVE-2026-70575](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70575) | Windows Schannel Denial of Service Vulnerability | Important | 
| Windows Secure Boot | [CVE-2026-69713](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69713) | Windows Secure Boot Security Feature Bypass Vulnerability | Important | 
| Windows Secure Kernel Mode | [CVE-2026-69501](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69501) | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical | 
| Windows Secure Kernel Mode | [CVE-2026-83939](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83939) | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical | 
| Windows Secure Kernel Mode | [CVE-2026-69846](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69846) | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical | 
| Windows Secure Kernel Mode | [CVE-2026-69906](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69906) | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical | 
| Windows Secure Socket Tunneling Protocol (SSTP) | [CVE-2026-72931](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72931) | Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability | Important | 
| Windows Secure Socket Tunneling Protocol (SSTP) | [CVE-2026-72930](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72930) | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Important | 
| Windows Secure Socket Tunneling Protocol (SSTP) | [CVE-2026-71332](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71332) | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability | Important | 
| Windows Secure Socket Tunneling Protocol (SSTP) | [CVE-2026-73009](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73009) | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Critical | 
| Windows Security Center | [CVE-2026-77899](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77899) | Windows Security Center Elevation of Privilege Vulnerability | Important | 
| Windows Security Health Service | [CVE-2026-78457](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78457) | Windows Security Health Service Elevation of Privilege Vulnerability | Important | 
| Windows Server | [CVE-2026-56177](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-56177) | Windows Server Elevation of Privilege Vulnerability | Important | 
| Windows Services for NFS ONCRPC XDR Driver | [CVE-2026-69595](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69595) | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Critical | 
| Windows Services for NFS ONCRPC XDR Driver | [CVE-2026-70585](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70585) | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Critical | 
| Windows Services for NFS ONCRPC XDR Driver | [CVE-2026-71330](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71330) | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | Important | 
| Windows Services for NFS ONCRPC XDR Driver | [CVE-2026-83989](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83989) | Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability | Important | 
| Windows Services for NFS ONCRPC XDR Driver | [CVE-2026-73024](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73024) | Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability | Important | 
| Windows Services for NFS ONCRPC XDR Driver | [CVE-2026-78445](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78445) | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Critical | 
| Windows Setup Files Cleanup | [CVE-2026-69289](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69289) | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | Important | 
| Windows Shell | [CVE-2026-69383](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69383) | Windows Shell Elevation of Privilege Vulnerability | Important | 
| Windows Shell | [CVE-2026-69829](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69829) | Windows Shell Remote Code Execution Vulnerability | Critical | 
| Windows Shell | [CVE-2026-69528](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69528) | Windows Shell Elevation of Privilege Vulnerability | Important | 
| Windows Shell | [CVE-2026-69606](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69606) | Windows Shell Elevation of Privilege Vulnerability | Important | 
| Windows Shell | [CVE-2026-69392](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69392) | Windows Shell Elevation of Privilege Vulnerability | Important | 
| Windows Shell | [CVE-2026-70563](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70563) | Windows Shell Spoofing Vulnerability | Important | 
| Windows Smart Card | [CVE-2026-69785](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69785) | Windows Smart Card Elevation of Privilege Vulnerability | Important | 
| Windows SMB Client | [CVE-2026-69544](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69544) | Windows SMB Client Elevation of Privilege Vulnerability | Important | 
| Windows SMB Client | [CVE-2026-69572](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69572) | Windows SMB Client Information Disclosure Vulnerability | Important | 
| Windows SMB Client | [CVE-2026-69618](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69618) | Windows SMB Client Information Disclosure Vulnerability | Important | 
| Windows SMB Client | [CVE-2026-72936](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72936) | Windows SMB Client Remote Code Execution Vulnerability | Important | 
| Windows SMB Server | [CVE-2026-69403](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69403) | Windows SMB Server Information Disclosure Vulnerability | Important | 
| Windows SMB Server | [CVE-2026-69374](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69374) | Windows SMB Server Denial of Service Vulnerability | Important | 
| Windows SMB Server Network Transport Driver (srvnet.sys) | [CVE-2026-72949](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72949) | Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-69643](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69643) | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-69741](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69741) | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-69691](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69691) | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-69770](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69770) | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-71349](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71349) | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-71348](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71348) | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-69895](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69895) | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-70569](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70569) | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-69535](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69535) | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-69512](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69512) | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-71345](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71345) | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-69538](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69538) | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-69393](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69393) | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-69390](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69390) | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-72952](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72952) | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-72942](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72942) | Windows Spaceport.sys Information Disclosure Vulnerability | Important | 
| Windows Spaceport.sys | [CVE-2026-71350](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71350) | Windows Spaceport.sys Remote Code Execution Vulnerability | Important | 
| Windows Storage | [CVE-2026-78516](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78516) | Windows Storage Information Disclosure Vulnerability | Important | 
| Windows Storage | [CVE-2026-69328](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69328) | Windows Storage Elevation of Privilege Vulnerability | Important | 
| Windows Storage Management Provider | [CVE-2026-69389](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69389) | Windows Storage Management Provider Elevation of Privilege Vulnerability | Important | 
| Windows Storage Management Provider | [CVE-2026-71337](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71337) | Windows Storage Management Provider Elevation of Privilege Vulnerability | Important | 
| Windows Storage Port Driver | [CVE-2026-69381](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69381) | Windows Storage Port Driver Information Disclosure Vulnerability | Important | 
| Windows Storage Spaces Controller | [CVE-2026-68877](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68877) | Windows Storage Spaces Controller Remote Code Execution Vulnerability | Important | 
| Windows Storage Spaces Controller | [CVE-2026-69568](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69568) | Storage Spaces Controller Information Disclosure Vulnerability | Important | 
| Windows Storage Spaces Controller | [CVE-2026-69290](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69290) | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Important | 
| Windows Storage Spaces Controller | [CVE-2026-69575](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69575) | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | Important | 
| Windows Storage Spaces Controller | [CVE-2026-68844](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68844) | Windows Storage Spaces Controller Remote Code Execution Vulnerability | Important | 
| Windows Task Scheduler | [CVE-2026-72945](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72945) | Windows Task Scheduler Information Disclosure Vulnerability | Important | 
| Windows TCP/IP | [CVE-2026-69757](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69757) | Windows TCP/IP Elevation of Privilege Vulnerability | Important | 
| Windows TCP/IP | [CVE-2026-69588](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69588) | Windows TCP/IP Denial of Service Vulnerability | Important | 
| Windows TCP/IP | [CVE-2026-69761](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69761) | Windows TCP/IP Elevation of Privilege Vulnerability | Important | 
| Windows TCP/IP | [CVE-2026-69404](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69404) | Windows TCP/IP Elevation of Privilege Vulnerability | Important | 
| Windows TCP/IP | [CVE-2026-69385](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69385) | Windows TCP/IP Elevation of Privilege Vulnerability | Important | 
| Windows TCP/IP | [CVE-2026-69793](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69793) | Windows TCP/IP Security Feature Bypass Vulnerability | Important | 
| Windows Text Shaping | [CVE-2026-69786](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69786) | Windows Text Shaping Remote Code Execution Vulnerability | Important | 
| Windows Text Shaping | [CVE-2026-69353](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69353) | Windows Text Shaping Information Disclosure Vulnerability | Important | 
| Windows Universal Disk Format File System Driver (UDFS) | [CVE-2026-69573](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69573) | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important | 
| Windows Universal Disk Format File System Driver (UDFS) | [CVE-2026-69758](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69758) | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important | 
| Windows Universal Disk Format File System Driver (UDFS) | [CVE-2026-69592](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69592) | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important | 
| Windows Universal Plug and Play (UPnP) Device Host | [CVE-2026-69351](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69351) | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | Important | 
| Windows Universal Plug and Play (UPnP) Device Host | [CVE-2026-68830](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68830) | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | Important | 
| Windows Update Stack | [CVE-2026-81963](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-81963) | Windows Update Stack Elevation of Privilege Vulnerability | Important | 
| Windows URL Moniker | [CVE-2026-73019](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-73019) | Windows URL Moniker Security Feature Bypass Vulnerability | Important | 
| Windows URL Moniker | [CVE-2026-69434](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69434) | Windows URL Moniker Remote Code Execution Vulnerability | Important | 
| Windows USB Audio Class driver (usbaudio.sys) | [CVE-2026-69286](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69286) | Windows USB Audio Class Driver Information Disclosure Vulnerability | Important | 
| Windows USB Audio Class driver (usbaudio.sys) | [CVE-2026-69687](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69687) | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 
| Windows USB Audio Class driver (usbaudio.sys) | [CVE-2026-69707](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69707) | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 
| Windows USB Audio Class driver (usbaudio.sys) | [CVE-2026-69270](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69270) | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 
| Windows USB Audio Class driver (usbaudio.sys) | [CVE-2026-69469](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69469) | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 
| Windows USB Audio Class driver (usbaudio.sys) | [CVE-2026-69571](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69571) | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 
| Windows USB Audio Class driver (usbaudio.sys) | [CVE-2026-69307](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69307) | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 
| Windows USB Audio Class driver (usbaudio.sys) | [CVE-2026-69413](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69413) | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 
| Windows USB Audio Class driver (usbaudio.sys) | [CVE-2026-69859](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69859) | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | Important | 
| Windows USB Driver | [CVE-2026-69457](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69457) | Windows USB Driver Information Disclosure Vulnerability | Important | 
| Windows USB Driver | [CVE-2026-72953](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72953) | Windows USB Driver Elevation of Privilege Vulnerability | Important | 
| Windows USB Driver | [CVE-2026-69503](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69503) | Windows USB Driver Elevation of Privilege Vulnerability | Important | 
| Windows USB Driver | [CVE-2026-68840](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68840) | Windows USB Driver Elevation of Privilege Vulnerability | Important | 
| Windows USB Driver | [CVE-2026-69295](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69295) | Windows USB Driver Elevation of Privilege Vulnerability | Important | 
| Windows USB Hub Driver | [CVE-2026-72999](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72999) | Windows USB Hub Driver Elevation of Privilege Vulnerability | Important | 
| Windows USB Mass Storage Class Driver | [CVE-2026-69527](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69527) | Windows USB Mass Storage Class Driver Information Disclosure Vulnerability | Important | 
| Windows USB Mass Storage Class Driver | [CVE-2026-68839](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68839) | Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability | Important | 
| Windows USB Mass Storage Class Driver | [CVE-2026-69490](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69490) | Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability | Important | 
| Windows USB Video Driver | [CVE-2026-69319](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69319) | Windows USB Video Driver Elevation of Privilege Vulnerability | Important | 
| Windows USB Video Driver | [CVE-2026-69584](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69584) | Windows USB Video Driver Elevation of Privilege Vulnerability | Important | 
| Windows USB Video Driver | [CVE-2026-69422](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69422) | Windows USB Video Driver Elevation of Privilege Vulnerability | Important | 
| Windows USB Video Driver | [CVE-2026-69423](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69423) | Windows USB Video Driver Elevation of Privilege Vulnerability | Important | 
| Windows USB Video Driver | [CVE-2026-72962](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72962) | Windows USB Video Driver Elevation of Privilege Vulnerability | Critical | 
| Windows VHD miniport driver | [CVE-2026-56172](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-56172) | Windows VHD miniport driver Elevation of Privilege Vulnerability | Important | 
| Windows Virtual Trusted Platform Module | [CVE-2026-69890](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69890) | Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability | Critical | 
| Windows Virtualization-Based Security (VBS) Enclave | [CVE-2026-83501](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83501) | Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability | Critical | 
| Windows Virtualization-Based Security (VBS) Enclave | [CVE-2026-83498](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83498) | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | Critical | 
| Windows VOLSNAP.SYS | [CVE-2026-69420](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69420) | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | Important | 
| Windows VOLSNAP.SYS | [CVE-2026-69427](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69427) | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | Important | 
| Windows VOLSNAP.SYS | [CVE-2026-69426](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69426) | Windows VOLSNAP.SYS Remote Code Execution Vulnerability | Important | 
| Windows Volume Manager Extension Driver | [CVE-2026-69582](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69582) | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Important | 
| Windows Volume Manager Extension Driver | [CVE-2026-77904](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77904) | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Important | 
| Windows Volume Manager Extension Driver | [CVE-2026-69291](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69291) | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | Important | 
| Windows Volume Manager Extension Driver | [CVE-2026-69468](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69468) | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | Important | 
| Windows Volume Manager Extension Driver | [CVE-2026-69334](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69334) | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | Important | 
| Windows Volume Shadow Copy | [CVE-2026-72985](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72985) | Volume Shadow Copy Elevation of Privilege Vulnerability | Important | 
| Windows Web Platform Storage | [CVE-2026-69708](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69708) | Windows Web Platform Storage Elevation of Privilege Vulnerability | Important | 
| Windows WebClient Service | [CVE-2026-72965](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72965) | Windows WebClient Service Elevation of Privilege Vulnerability | Important | 
| Windows Win32 Kernel Subsystem | [CVE-2026-70290](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70290) | Win32k Information Disclosure Vulnerability | Important | 
| Windows Win32 Kernel Subsystem | [CVE-2026-70289](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70289) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69853](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69853) | Win32k Information Disclosure Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69410](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69410) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69498](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69498) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69348](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69348) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69333](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69333) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69832](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69832) | Win32k Information Disclosure Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69818](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69818) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69335](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69335) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69808](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69808) | Win32k Information Disclosure Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69274](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69274) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-68880](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-68880) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69301](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69301) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69844](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69844) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-70283](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-70283) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69792](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69792) | Windows Win32K Security Feature Bypass Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69609](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69609) | Win32k Information Disclosure Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69652](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69652) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69610](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69610) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69630](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69630) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69689](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69689) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69706](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69706) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69779](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69779) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Win32K | [CVE-2026-69762](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69762) | Windows Win32k Elevation of Privilege Vulnerability | Important | 
| Windows Wireless Networking | [CVE-2026-69517](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69517) | Windows Wireless Networking Elevation of Privilege Vulnerability | Important | 
| Windows Wireless Wide Area Network Service | [CVE-2026-69862](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69862) | Windows Wireless Wide Area Network Service Information Disclosure Vulnerability | Important | 
| Windows Work Folder Service | [CVE-2026-69560](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69560) | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 
| Windows Work Folder Service | [CVE-2026-71336](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-71336) | Windows Work Folder Service Remote Code Execution Vulnerability | Important | 
| Windows Work Folders | [CVE-2026-80075](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-80075) | Windows Work Folders Elevation of Privilege Vulnerability | Important | 
| Winsock | [CVE-2026-72927](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-72927) | Winsock Elevation of Privilege Vulnerability | Important | 
| Xbox | [CVE-2026-78455](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-78455) | Xbox Information Disclosure Vulnerability | Important | 
| XBox Gaming Services | [CVE-2026-58611](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-58611) | Xbox Gaming Services Elevation of Privilege Vulnerability | Important | 

## 
[Once attackers have valid credentials, only 37% of their actions are blocked](https://hubs.li/Q04sB3fb0)

Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.

The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.

[Get the report](https://hubs.li/Q04sB3fb0)