Patch Tuesday - August 2026

Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever return to the lower volumes we saw prior to 2026. Microsoft is aware of exploitation in the wild for one of the vulnerabilities published today, as well as public disclosure for two others, although the Notable CVEs section of the Security Update Guide omits one of these. As usual, browser vulns are not included in the Patch Tuesday count above, but unusually, Microsoft does not appear to have published any desktop browser security patches so far this month.SharePoint: critical RCE chain by Rapid7Today sees the publication of CVE-2026-63520, a high-severity remote code execution in Microsoft SharePoint. Discovered by Rapid7 Senior Principal Security Researcher Stephen Fewer, and published today in coordination with Microsoft; this vulnerability is the second in a pair of exploits which, when chained together, comprise a critical unauthenticated remote code execution vulnerability in a vulnerable SharePoint server. Patches are available for SharePoint Server Subscription Edition, 2019, and 2016. Alongside today’s coordinated disclosure of CVE-2026-63520, Rapid7 has now published a detailed technical analysis and proof-of-concept for CVE-2026-55040, the first vulnerability in the chain.AFD for Winsock: zero-day EoPRapid7 has previously discussed the Windows Ancillary Function Driver for WinSock, and today it returns to center stage with another exploited-in-the-wild elevation-of-privilege vulnerability. Successful exploitation requires winning a race condition, which increases the difficulty of producing a stable exploit. This also helps keep the CVSS v3 base score down to 7.0, along with a Microsoft proprietary severity ranking of merely important, rather than critical. However, with no user interaction required, and a prize of SYSTEM-level access, CVE-2026-68820 is just what the doctor ordered, if the doctor is based in Pyongyang and wants to steal your cryptocurrency. Microsoft credits CVE-2026-68820 to researchers at Check Point (misspelled “Checkpoint” on the advisory). CVE-2026-68820 isn’t yet listed on CISA KEV, but it will be soon.What’s the opposite of coordinated disclosure?This month’s entry in the ongoing saga of Microsoft vs. a pseudonymous security researcher with a clear dislike of Microsoft comes in the form of CVE-2026-62832, an elevation of privilege vulnerability in the Windows User Profile Service. Exploitation leads to administrator rights on the local asset, and is achieved via a specially crafted application, which is Microsoft corporate argot for exploit code. Between the public disclosure and the FAQ, which describes an authenticated attacker who has credentials for another account and loads another user’s registry hive, the advisory is a solid match for Nightmare Eclipse’s description of LegacyHive, which Rapid7 discussed last month.Patch Tuesday watchers will have been wondering whether Nightmare Eclipse would continue the pattern of the past few months by dropping yet another zero-day vuln late on Patch Tuesday to maximize friction and inconvenience for Microsoft. Wonder no more, because the new entry on this growing list of headaches is ShieldBreak. Nightmare Eclipse describes ShieldBreak as a full patch bypass for RoguePlanet, a previous entry in the series which Microsoft patched as CVE-2026-50656 during July, a month after its public disclosure. Both vulnerabilities are therefore elevation-of-privilege to SYSTEM vulnerabilities in Defender.Container isolation filesystem driver: isolation failure, tamperingCVE-2026-72971 describes a tampering vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys), where abuse of a flaw in the vulnerable driver presumably allows an unauthorized attacker to overwrite certain files. Since this might include an action taken within a container leading to an unauthorized impact outside the container, it might be surprising that the advisory claims no scope change. Presumably Microsoft is leaning on the fact that the vulnerability is within a driver which operates entirely within a single security authority, i.e. kernel space, so there is only one impacted component and no scope change according to the CVSS v3 spec. Still, the low CVSS v3 base score of 5.5 probably isn’t telling the whole story in this case.Vulnerabilities classed as tampering are somewhat rare in the Microsoft corpus, making up just a few dozen of the thousands of unique vulnerabilities which MSRC has ever patched or otherwise addressed. CVE-2026-72971 isn’t mentioned in the Notable CVEs section of the new slimline Security Update Guide. Should it be? Perhaps, because Microsoft is aware of public disclosure in this case, but then again the categorization as tampering means that Microsoft is not currently aware of a path to a more severe impact such as elevation of privilege or code execution. The advisory acknowledges a pair of pseudonymous reporters, who also receive credit on at least 40 other advisories over the past few months, across a wide variety of Windows components and Microsoft Office, including 11 critical vulnerabilities.Edge: update slowdown?Typically, Microsoft patches a fair few browser vulnerabilities between the start of each month and that month’s Patch Tuesday, but not this month. Conspicuous by its absence at the time of Patch Tuesday publication today was Microsoft Edge, which receives regular batches of patches as a downstream consumer of Google Chromium. At the moment of Patch Tuesday publication, the desktop incarnations of Edge last received security patches on July 31, 2026. Meanwhile, the Chrome Stable Channel received patches for 41 vulnerabilities on August 6, 2026. Anyone responsible for assets with Microsoft Edge installed will be relieved to know that patches for Edge eventually emerged a few hours later on Patch Tuesday itself, but five days is still a longer unpatched gap between Chrome and Edge than has been typical in the past.Microsoft lifecycle updateAugust is typically a quieter month for Microsoft product lifecycle transitions, and this year continues that pattern. The next lifecycle changes with broad impact occur on October 14, 2026, when Windows 11 24H2 Home & Pro reach end of servicing, and Windows Server 2022 moves to extended support, with free critical security updates continuing, but no further feature development. At the same time, the final curtain falls for Windows Server 2012 and 2012 R2 with the expiry of the third and final year of cash-for-updates Extended Security Update (ESU) program for these aging workhorses. Office 2021 also moves beyond support, including the Long-Term Servicing Channel, with no ESU available in that case. Also in October, Exchange Server 2016 and 2019 will join the “no ESU” club, after two previous six-month reprieves. Presumably, Microsoft really means it this time.Summary charts Summary tablesVulnerabilities by Product FamilyApps vulnerabilitiesCVETitleExploitation statusPublicly disclosed?CVSS v3 base scoreCVE-2026-68821Windows Package Manager Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.3Azure vulnerabilitiesCVETitleExploitation statusPublicly disclosed?CVSS v3 base scoreCVE-2026-70340Azure CycleCloud Elevation of Privilege VulnerabilityExploitation Less LikelyNo8.1CVE-2026-65806Azure CycleCloud Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-47299Azure Monitor Agent Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.2CVE-2026-65673Microsoft Entra Connect Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-6726MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot ReuseExploitation Less LikelyNo7.9CVE-2026-6727MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel VulnerabilityExploitation Less LikelyNo5.9Browser vulnerabilitiesCVETitleExploitation statusPublicly disclosed?CVSS v3 base scoreCVE-2026-70339Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityExploitation UnlikelyNo5.4CVE-2026-19137CVE-2026-19137 Use after free in WebGLn/aNoCVE-2026-19138CVE-2026-19138 Heap buffer overflow in CrashReportingn/aNoCVE-2026-19139CVE-2026-19139 Race in CredentialProvidern/aNoCVE-2026-19140CVE-2026-19140 Use after free in GPUn/aNoCVE-2026-19142CVE-2026-19142 Use after free in Viewsn/aNoCVE-2026-19144CVE-2026-19144 Use after free in HTMLn/aNoCVE-2026-19145CVE-2026-19145 Use after free in Translaten/aNoCVE-2026-19146CVE-2026-19146 Uninitialized Use in GPUn/aNoCVE-2026-19147CVE-2026-19147 Use after free in Auran/aNoCVE-2026-19148CVE-2026-19148 Out of bounds write in GPUn/aNoCVE-2026-19149CVE-2026-19149 Use after free in Auran/aNoCVE-2026-19150CVE-2026-19150 Inappropriate implementation in V8n/aNoCVE-2026-19151CVE-2026-19151 Use after free in V8n/aNoCVE-2026-19152CVE-2026-19152 Inappropriate implementation in Navigationn/aNoCVE-2026-19153CVE-2026-19153 Insufficient validation of untrusted input in Workersn/aNoCVE-2026-19155CVE-2026-19155 Use after free in Paymentsn/aNoCVE-2026-19156CVE-2026-19156 Heap buffer overflow in Basen/aNoCVE-2026-19157CVE-2026-19157 Out of bounds write in ANGLEn/aNoCVE-2026-19158CVE-2026-19158 Use after free in Viewsn/aNoCVE-2026-19159CVE-2026-19159 Use after free in Viewsn/aNoCVE-2026-19160CVE-2026-19160 Uninitialized Use in Skian/aNoCVE-2026-19161CVE-2026-19161 Uninitialized Use in Skian/aNoCVE-2026-19162CVE-2026-19162 Out of bounds write in V8n/aNoCVE-2026-19163CVE-2026-19163 Use after free in Median/aNoCVE-2026-19164CVE-2026-19164 Insufficient validation of untrusted input in Codecsn/aNoCVE-2026-19165CVE-2026-19165 Use after free in Extensionsn/aNoCVE-2026-19166CVE-2026-19166 Use after free in Web Authenticationn/aNoCVE-2026-19167CVE-2026-19167 Integer overflow in GPUn/aNoCVE-2026-19168CVE-2026-19168 Inappropriate implementation in V8n/aNoCVE-2026-19169CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasksn/aNoCVE-2026-19170CVE-2026-19170 Use after free in WebGLn/aNoCVE-2026-19171CVE-2026-19171 Use after free in Median/aNoCVE-2026-19172CVE-2026-19172 Use after free in Viewsn/aNoCVE-2026-19173CVE-2026-19173 Out of bounds write in Skian/aNoCVE-2026-19174CVE-2026-19174 Integer overflow in V8n/aNoCVE-2026-19175CVE-2026-19175 Use after free in Paymentsn/aNoCVE-2026-19176CVE-2026-19176 Use after free in Skian/aNoCVE-2026-19177CVE-2026-19177 Insufficient validation of untrusted input in UIn/aNoDeveloper Tools vulnerabilitiesCVETitleExploitation statusPublicly disclosed?CVSS v3 base scoreCVE-2026-70354.NET Core Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62901.NET Denial of Service VulnerabilityExploitation Less LikelyNo7.5CVE-2026-62909.NET Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-58641.NET Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62871.NET Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62886.NET Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62872.NET Framework Elevation of Privilege VulnerabilityExploitation Less LikelyNo8.8CVE-2026-65810.NET Framework Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62897.NET Framework Remote Code Execution VulnerabilityExploitation Less LikelyNo7.0CVE-2026-62900.NET Information Disclosure VulnerabilityExploitation Less LikelyNo5.9CVE-2026-62902.NET Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62899.NET Security Feature Bypass VulnerabilityExploitation Less LikelyNo5.9CVE-2026-65675CoPilot Chat Security Feature Bypass VulnerabilityExploitation Less LikelyNo7.1CVE-2026-70335GitHub Copilot and Visual Studio Code Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-70337Microsoft PowerShell Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-70338Microsoft PowerShell Security Feature Bypass VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62898Microsoft QUIC Information Disclosure VulnerabilityExploitation Less LikelyNo7.5CVE-2026-59119PowerShell Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.3CVE-2026-58612PowerShell Information Disclosure VulnerabilityExploitation Less LikelyNo7.4CVE-2026-47285Visual Studio Code Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-54981Visual Studio Code Python Extension Security Feature Bypass VulnerabilityExploitation Less LikelyNo7.8CVE-2026-59113Visual Studio Code Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-69320Visual Studio Code Remote Code Execution VulnerabilityExploitation UnlikelyNo8.8CVE-2026-70336Visual Studio Code Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-58650Visual Studio Code Security Feature Bypass VulnerabilityExploitation More LikelyNo7.8CVE-2026-69278Visual Studio Code Security Feature Bypass VulnerabilityExploitation More LikelyNo7.8CVE-2026-69306Visual Studio Code Security Feature Bypass VulnerabilityExploitation Less LikelyNo8.2ESU vulnerabilitiesCVETitleExploitation statusPublicly disclosed?CVSS v3 base scoreCVE-2026-59130AMD Zen Information Disclosure VulnerabilityExploitation Less LikelyNo5.6CVE-2026-59131AMD Zen Information Disclosure VulnerabilityExploitation Less LikelyNo5.6CVE-2026-62892Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-65786Desktop Window Manager Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65787Desktop Window Manager Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-59136Microsoft COM for Windows Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-62698Microsoft Digest Authentication Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-62912Microsoft Exchange Server Denial of Service VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62910Microsoft Exchange Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.2CVE-2026-65813Microsoft Exchange Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62911Microsoft Exchange Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo8.0CVE-2026-62913Microsoft Exchange Server Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-62915Microsoft Exchange Server Security Feature Bypass VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62914Microsoft Exchange Server Spoofing VulnerabilityExploitation Less LikelyNo7.3CVE-2026-62784Microsoft Local Security Authority Server (lsasrv) Remote Code Execution VulnerabilityExploitation UnlikelyNo8.8CVE-2026-59138Microsoft Remote Registry Service Denial of Service VulnerabilityExploitation Less LikelyNo6.5CVE-2026-61345Microsoft Remote Registry Service Denial of Service VulnerabilityExploitation Less LikelyNo6.5CVE-2026-66804Microsoft Windows Cross Device Service Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-59135Microsoft Windows Search Component Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-65814Microsoft Windows Storage Port Driver Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-6726MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot ReuseExploitation Less LikelyNo7.9CVE-2026-6727MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel VulnerabilityExploitation Less LikelyNo5.9CVE-2026-65671Remote Access API Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-42976Remote Access Management service/API (RPC server) Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-59134Remote Desktop Client Remote Code Execution VulnerabilityExploitation Less LikelyNo7.5CVE-2026-61352Remote Desktop Client Remote Code Execution VulnerabilityExploitation Less LikelyNo7.5CVE-2026-61363Remote Desktop Client Remote Code Execution VulnerabilityExploitation Less LikelyNo7.5CVE-2026-62824Remote Desktop Client Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-54113Remote Procedure Call Denial of Service VulnerabilityExploitation UnlikelyNo7.5CVE-2026-62781RPC Runtime Library Remote Code Execution VulnerabilityExploitation UnlikelyNo8.1CVE-2026-59125Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityExploitation Less LikelyNo7.0CVE-2026-62746Win32k Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-62743Win32k Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-62786Win32k Information Disclosure VulnerabilityExploitation UnlikelyNo5.5CVE-2026-61358Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-62818Windows Active Directory Certificate Services (AD CS) Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-49179Windows Active Directory Domain Services Remote Code Execution VulnerabilityExploitation UnlikelyNo8.8CVE-2026-61348Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityExploitation More LikelyNo7.0CVE-2026-68820Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityExploitation DetectedNo7.0CVE-2026-70307Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityExploitation More LikelyNo7.0CVE-2026-62908Windows Backup Engine Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.0CVE-2026-62713Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-62771Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62728Windows Common Log File System Driver Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.0CVE-2026-61936Windows Defender Firewall Service Security Feature Bypass VulnerabilityExploitation UnlikelyNo5.5CVE-2026-62893Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityExploitation More LikelyNo9.8CVE-2026-62747Windows Device Association Service Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-62710Windows Device Association Service Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62755Windows DHCP Client Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62812Windows DHCP Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62761Windows DHCP Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62776Windows DHCP Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62803Windows DHCP Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62807Windows DHCP Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62718Windows DHCP Server Information Disclosure VulnerabilityExploitation UnlikelyNo6.5CVE-2026-62715Windows DHCP Server Information Disclosure VulnerabilityExploitation UnlikelyNo6.5CVE-2026-62716Windows DHCP Server Information Disclosure VulnerabilityExploitation UnlikelyNo6.5CVE-2026-62742Windows DHCP Server Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62745Windows DHCP Server Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62720Windows DHCP Server Information Disclosure VulnerabilityExploitation UnlikelyNo6.5CVE-2026-62714Windows DHCP Server Information Disclosure VulnerabilityExploitation UnlikelyNo6.5CVE-2026-62814Windows DHCP Server Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62823Windows DHCP Server Remote Code Execution VulnerabilityExploitation More LikelyNo8.8CVE-2026-61923Windows Display Enhancement Service Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-70304Windows DNS Elevation of Privilege VulnerabilityExploitation UnlikelyNo6.7CVE-2026-70330Windows DNS Elevation of Privilege VulnerabilityExploitation Less LikelyNo6.7CVE-2026-62769Windows DNS Elevation of Privilege VulnerabilityExploitation UnlikelyNo6.7CVE-2026-62778Windows DNS Elevation of Privilege VulnerabilityExploitation Less LikelyNo8.1CVE-2026-62881Windows DNS Elevation of Privilege VulnerabilityExploitation UnlikelyNo6.7CVE-2026-62883Windows DNS Elevation of Privilege VulnerabilityExploitation Less LikelyNo6.7CVE-2026-65795Windows DNS Elevation of Privilege VulnerabilityExploitation UnlikelyNo6.7CVE-2026-65797Windows DNS Elevation of Privilege VulnerabilityExploitation Less LikelyNo6.7CVE-2026-65799Windows DNS Elevation of Privilege VulnerabilityExploitation UnlikelyNo6.7CVE-2026-65798Windows DNS Elevation of Privilege VulnerabilityExploitation Less LikelyNo6.7CVE-2026-62787Windows DNS Server Remote Code Execution VulnerabilityExploitation UnlikelyNo7.5CVE-2026-62817Windows DNS Server Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-62878Windows DNS Server Remote Code Execution VulnerabilityExploitation Less LikelyNo9.8CVE-2026-61920Windows DNS Server Remote Code Execution VulnerabilityExploitation UnlikelyNo6.6CVE-2026-61932Windows DWM Core Library Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62894Windows DWM Core Library Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62888Windows DWM Core Library Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-62703Windows DWM Core Library Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-59128Windows Encrypting File System (EFS) Information Disclosure VulnerabilityExploitation UnlikelyNo5.5CVE-2026-59126Windows Event Logging Service Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-59137Windows Event Logging Service Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-61347Windows Event Logging Service Information Disclosure VulnerabilityExploitation UnlikelyNo5.5CVE-2026-65662Windows GDI Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-61360Windows GDI Information Disclosure VulnerabilityExploitation UnlikelyNo5.5CVE-2026-62890Windows GDI+ Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62709Windows GDI+ Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-62822Windows GDI+ Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-62702Windows Graphics Kernel Denial of Service VulnerabilityExploitation Less LikelyNo6.8CVE-2026-61346Windows Graphics Kernel Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-62774Windows Graphics Kernel Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-61928Windows Hello Tampering VulnerabilityExploitation Less LikelyNo5.5CVE-2026-62750Windows HTTP Protocol Stack Tampering VulnerabilityExploitation UnlikelyNo6.5CVE-2026-61937Windows HTTP.sys Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62753Windows HTTP.sys Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.0CVE-2026-62735Windows HTTP.sys Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-62739Windows HTTP.sys Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-62741Windows HTTP.sys Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-61368Windows Hyper-V Information Disclosure VulnerabilityExploitation Less LikelyNo5.0CVE-2026-62740Windows Imaging Component Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-54984Windows Imaging Component Remote Code Execution VulnerabilityExploitation UnlikelyNo7.8CVE-2026-59127Windows Installer Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-61925Windows Installer Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-70344Windows Installer Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-70345Windows Installer Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-70346Windows Installer Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-70347Windows Installer Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62768Windows Installer Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65774Windows Installer Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65796Windows iSCSI Target Service Denial of Service VulnerabilityExploitation UnlikelyNo5.9CVE-2026-65679Windows iSCSI Target Service Remote Code Execution VulnerabilityExploitation Less LikelyNo8.1CVE-2026-65791Windows iSCSI Target Service Remote Code Execution VulnerabilityExploitation UnlikelyNo9.8CVE-2026-62754Windows Kerberos Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-62773Windows Kerberos Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-62752Windows Kerberos Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-61930Windows Kernel Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-65773Windows Kernel Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-66799Windows Key Guard Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62785Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityExploitation UnlikelyNo8.8CVE-2026-62795Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityExploitation UnlikelyNo8.8CVE-2026-62777Windows License Manager Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-50472Windows LUA File Virtualization Filter Driver Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-62738Windows Management Instrumentation Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-62719Windows Message Queuing Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62717Windows Message Queuing Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65790Windows Message Queuing Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-62707Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-56174Windows Narrator Braille Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-61366Windows Network Connection Broker Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-68819Windows Network File System Denial of Service VulnerabilityExploitation UnlikelyNo5.9CVE-2026-62797Windows NTFS Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62700Windows NTFS Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62880Windows NTFS Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-61350Windows NTFS Information Disclosure VulnerabilityExploitation Less LikelyNo4.6CVE-2026-62796Windows NTFS Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-65784Windows NTFS Information Disclosure VulnerabilityExploitation UnlikelyNo5.5CVE-2026-62793Windows NTFS Information Disclosure VulnerabilityExploitation UnlikelyNo5.5CVE-2026-62887Windows NTFS Information Disclosure VulnerabilityExploitation UnlikelyNo5.5CVE-2026-62696Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-62751Windows Projected File System Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62690Windows Push Notifications Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-62816Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-62783Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-62758Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-61924Windows Remote Desktop Client Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-61918Windows Remote Desktop Client Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-61921Windows Remote Desktop Client Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-61356Windows Remote Desktop Services Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-61367Windows Remote Desktop Services Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62692Windows Remote Desktop Services Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-61364Windows Remote Desktop Services Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-61365Windows Remote Desktop Services Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62819Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityExploitation Less LikelyNo8.1CVE-2026-62757Windows Schannel Security Feature Bypass VulnerabilityExploitation UnlikelyNo5.3CVE-2026-62889Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityExploitation Less LikelyNo8.1CVE-2026-61355Windows Sensor Data Service Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-62770Windows Shell Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62782Windows SMB Client Information Disclosure VulnerabilityExploitation UnlikelyNo6.5CVE-2026-65794Windows SMB Client Information Disclosure VulnerabilityExploitation UnlikelyNo6.5CVE-2026-62800Windows SMBv3 Server Remote Code Execution VulnerabilityExploitation UnlikelyNo8.8CVE-2026-62790Windows SMBv3 Server Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-59132Windows TCP/IP Denial of Service VulnerabilityExploitation More LikelyNo7.5CVE-2026-62792Windows TCP/IP Remote Code Execution VulnerabilityExploitation UnlikelyNo8.1CVE-2026-61353Windows Telephony Service Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62723Windows Telephony Service Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-62724Windows Telephony Service Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-62748Windows Telephony Service Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.0CVE-2026-62729Windows Telephony Service Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.0CVE-2026-59122Windows Telephony Service Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-62701Windows Telephony Service Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62725Windows Telephony Service Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.0CVE-2026-62726Windows Telephony Service Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-62732Windows Telephony Service Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-62734Windows Telephony Service Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.0CVE-2026-62699Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution VulnerabilityExploitation Less LikelyNo6.8CVE-2026-61926Windows USB Driver Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62832Windows User Profile Service Elevation of Privilege VulnerabilityExploitation More LikelyYes7.8CVE-2026-62721Windows User-Mode Power Service (UMPS) Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-62712Windows Win32k Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-62876Windows Win32k Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62877Windows Win32k Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65678Windows Win32k Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-62711Windows Win32k Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62733Windows Win32k Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62885Windows Win32k Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65775Windows Win32k Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-62730Windows Wired AutoConfig Service Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-61349Windows Work Folder Service Elevation of Privilege VulnerabilityExploitation UnlikelyNo7.8CVE-2026-61939Winlogon Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0Microsoft Dynamics vulnerabilitiesCVETitleExploitation statusPublicly disclosed?CVSS v3 base scoreCVE-2026-66301Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-65815Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-40375Microsoft Dynamics Business Central Information Disclosure VulnerabilityExploitation Less LikelyNo6.5Microsoft Office vulnerabilitiesCVETitleExploitation statusPublicly disclosed?CVSS v3 base scoreCVE-2026-64906Microsoft Access Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64912Microsoft Access Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64908Microsoft Access Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64914Microsoft Access Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64920Microsoft Access Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64919Microsoft Access Remote Code Execution VulnerabilityExploitation UnlikelyNo7.8CVE-2026-68802Microsoft Excel Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-68808Microsoft Excel Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-68813Microsoft Excel Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-70318Microsoft Excel Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-70327Microsoft Excel Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-70328Microsoft Excel Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-68797Microsoft Excel Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-68799Microsoft Excel Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-65807Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-68793Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68794Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68795Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68796Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68800Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68807Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68806Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68810Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68811Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68815Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68816Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68798Microsoft Excel Remote Code Execution VulnerabilityExploitation UnlikelyNo7.8CVE-2026-68801Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68803Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68804Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68805Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68812Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68814Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68817Microsoft Excel Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68792Microsoft Office Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-63517Microsoft Office Graphics Component Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-62842Microsoft Office Graphics Component Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-66809Microsoft Office Graphics Component Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-63513Microsoft Office Graphics Component Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-63519Microsoft Office Graphics Component Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65664Microsoft Office Graphics Component Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-63526Microsoft Office Graphics Component Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-66807Microsoft Office Graphics Component Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-70315Microsoft Office Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-70314Microsoft Office Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-70317Microsoft Office Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-70323Microsoft Office Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-63524Microsoft Office Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-63529Microsoft Office Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-64899Microsoft Office Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-63515Microsoft Office Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65657Microsoft Office Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65656Microsoft Office Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65661Microsoft Office Remote Code Execution VulnerabilityExploitation UnlikelyNo7.8CVE-2026-63532Microsoft Office Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-63533Microsoft Office Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64898Microsoft Office Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64903Microsoft Office Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64904Microsoft Office Remote Code Execution VulnerabilityExploitation UnlikelyNo7.8CVE-2026-64909Microsoft Office Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64910Microsoft Office Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64911Microsoft Office Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-70130Microsoft Office Remote Code Execution VulnerabilityExploitation Less LikelyNo8.4CVE-2026-57105Microsoft Office SharePoint Spoofing VulnerabilityExploitation Less LikelyNo8.0CVE-2026-70306Microsoft Office SharePoint Spoofing VulnerabilityExploitation Less LikelyNo9.3CVE-2026-63521Microsoft Office Word Information Disclosure VulnerabilityExploitation UnlikelyNo5.5CVE-2026-70319Microsoft Office Word Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-63528Microsoft Office Word Information Disclosure VulnerabilityExploitation UnlikelyNo5.5CVE-2026-63530Microsoft Office Word Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-63531Microsoft Office Word Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-64917Microsoft Office Word Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-66806Microsoft Office Word Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-66810Microsoft Office Word Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-63518Microsoft Office Word Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-70311Microsoft Office Word Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-63525Microsoft Office Word Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-63527Microsoft Office Word Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64905Microsoft Office Word Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64907Microsoft Office Word Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-64915Microsoft Office Word Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65680Microsoft OneDrive for MacOS Elevation of Privilege VulnerabilityExploitation Less LikelyNo6.7CVE-2026-70329Microsoft Outlook Remote Code Execution VulnerabilityExploitation UnlikelyNo8.8CVE-2026-62882Microsoft Outlook Spoofing VulnerabilityExploitation UnlikelyNo4.3CVE-2026-70313Microsoft PowerPoint Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-70324Microsoft SharePoint Elevation of Privilege VulnerabilityExploitation Less LikelyNo8.8CVE-2026-70321Microsoft SharePoint Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-62827Microsoft SharePoint Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo8.8CVE-2026-70355Microsoft SharePoint Server Elevation of Privilege VulnerabilityExploitation More LikelyNo7.3CVE-2026-64921Microsoft SharePoint Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo8.8CVE-2026-70326Microsoft SharePoint Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo8.8CVE-2026-62837Microsoft SharePoint Server Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-63514Microsoft SharePoint Server Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-63520Microsoft SharePoint Server Remote Code Execution VulnerabilityExploitation More LikelyNo8.1CVE-2026-65658Microsoft SharePoint Server Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-65663Microsoft SharePoint Server Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-65665Microsoft SharePoint Server Remote Code Execution VulnerabilityExploitation More LikelyNo8.8CVE-2026-64901Microsoft SharePoint Server Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-66805Microsoft SharePoint Server Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-66808Microsoft SharePoint Server Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-62829Microsoft SharePoint Server Spoofing VulnerabilityExploitation Less LikelyNo4.6CVE-2026-63516Microsoft SharePoint Server Spoofing VulnerabilityExploitation Less LikelyNo6.5CVE-2026-64922Microsoft SharePoint Server Spoofing VulnerabilityExploitation Less LikelyNo4.6CVE-2026-65660Microsoft SharePoint Server Spoofing VulnerabilityExploitation Less LikelyNo6.5CVE-2026-64897Microsoft SharePoint Server Spoofing VulnerabilityExploitation Less LikelyNo4.6CVE-2026-64900Microsoft SharePoint Server Spoofing VulnerabilityN/ANo7.3CVE-2026-64902Microsoft SharePoint Server Spoofing VulnerabilityN/ANo4.6CVE-2026-64916Microsoft SharePoint Server Spoofing VulnerabilityExploitation UnlikelyNo4.6CVE-2026-58639Microsoft SharePoint Server Spoofing VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62839Microsoft SharePoint Server Spoofing VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62917Microsoft SharePoint Server Spoofing VulnerabilityExploitation Less LikelyNo4.6CVE-2026-63512Microsoft SharePoint Server Tampering VulnerabilityExploitation Less LikelyNo6.5CVE-2026-65767Microsoft Teams for Android and iOS Spoofing VulnerabilityExploitation Less LikelyNo8.8CVE-2026-65769Microsoft Teams iOS Information Disclosure VulnerabilityExploitation Less LikelyNo6.5CVE-2026-65768Microsoft Teams Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-70310Microsoft Word Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-58651Microsoft Word Remote Code Execution VulnerabilityExploitation Less LikelyNo7.8CVE-2026-68809Powerpoint Information Disclosure VulnerabilityExploitation UnlikelyNo5.5CVE-2026-70312Powerpoint Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-70316Powerpoint Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-70325Powerpoint Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-70320Powerpoint Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-70322Powerpoint Information Disclosure VulnerabilityExploitation Less LikelyNo5.5Server Software vulnerabilitiesCVETitleExploitation statusPublicly disclosed?CVSS v3 base scoreCVE-2026-62912Microsoft Exchange Server Denial of Service VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62910Microsoft Exchange Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.2CVE-2026-65813Microsoft Exchange Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62911Microsoft Exchange Server Elevation of Privilege VulnerabilityExploitation Less LikelyNo8.0CVE-2026-62913Microsoft Exchange Server Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-62915Microsoft Exchange Server Security Feature Bypass VulnerabilityExploitation Less LikelyNo6.5CVE-2026-62914Microsoft Exchange Server Spoofing VulnerabilityExploitation Less LikelyNo7.3SQL Server vulnerabilitiesCVETitleExploitation statusPublicly disclosed?CVSS v3 base scoreCVE-2026-65811Power BI Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8System Center vulnerabilitiesCVETitleExploitation statusPublicly disclosed?CVSS v3 base scoreCVE-2026-54123Microsoft Defender for Endpoint for Mac Information Disclosure VulnerabilityExploitation Less LikelyNo5.5Windows vulnerabilitiesCVETitleExploitation statusPublicly disclosed?CVSS v3 base scoreCVE-2026-65777Active Directory Security Feature Bypass VulnerabilityExploitation UnlikelyNo5.3CVE-2026-59130AMD Zen Information Disclosure VulnerabilityExploitation Less LikelyNo5.6CVE-2026-59131AMD Zen Information Disclosure VulnerabilityExploitation Less LikelyNo5.6CVE-2026-61357Application Information Services Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-62892Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.0CVE-2026-65786Desktop Window Manager Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65787Desktop Window Manager Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65788Desktop Window Manager Elevation of Privilege VulnerabilityExploitation More LikelyNo7.0CVE-2026-59136Microsoft COM for Windows Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-62698Microsoft Digest Authentication Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-59133Microsoft High Performance Computing (HPC) Pack Elevation of Privilege VulnerabilityExploitation More LikelyNo8.8CVE-2026-59124Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityExploitation More LikelyNo9.8CVE-2026-62784Microsoft Local Security Authority Server (lsasrv) Remote Code Execution VulnerabilityExploitation UnlikelyNo8.8CVE-2026-62815Microsoft QUIC Remote Code Execution VulnerabilityN/ANo9.8CVE-2026-59138Microsoft Remote Registry Service Denial of Service VulnerabilityExploitation Less LikelyNo6.5CVE-2026-61345Microsoft Remote Registry Service Denial of Service VulnerabilityExploitation Less LikelyNo6.5CVE-2026-66804Microsoft Windows Cross Device Service Elevation of Privilege VulnerabilityExploitation More LikelyNo7.8CVE-2026-59135Microsoft Windows Search Component Information Disclosure VulnerabilityExploitation Less LikelyNo5.5CVE-2026-65814Microsoft Windows Storage Port Driver Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-6726MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot ReuseExploitation Less LikelyNo7.9CVE-2026-6727MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel VulnerabilityExploitation Less LikelyNo5.9CVE-2026-65671Remote Access API Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-65672Remote Access API Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-42976Remote Access Management service/API (RPC server) Elevation of Privilege VulnerabilityExploitation Less LikelyNo7.8CVE-2026-59134Remote Desktop Client Remote Code Execution VulnerabilityExploitation Less LikelyNo7.5CVE-2026-61352Remote Desktop Client Remote Code Execution VulnerabilityExploitation Less LikelyNo7.5CVE-2026-61363Remote Desktop Client Remote Code Execution VulnerabilityExploitation Less LikelyNo7.5CVE-2026-62824Remote Desktop Client Remote Code Execution VulnerabilityExploitation Less LikelyNo8.8CVE-2026-54113Remote Procedure Call Denial of Service VulnerabilityExploitation UnlikelyNo7.5CVE-2026-62781RPC Runtime Library Remote Code Execution VulnerabilityExploitation UnlikelyNo8.1CVE-2026-59125Virtual