Patch Tuesday - August 2026

Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday , including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever return to the lower volumes we saw prior to 2026. Microsoft is aware of exploitation in the wild for one of the vulnerabilities published today, as well as public disclosure for two others, although the Notable CVEs section of the Security Update Guide omits one of these. As usual, browser vulns are not included in the Patch Tuesday count above, but unusually, Microsoft does not appear to have published any desktop browser security patches so far this month. SharePoint: critical RCE chain by Rapid7 Today sees the publication of CVE-2026-63520 , a high-severity remote code execution in Microsoft SharePoint. Discovered by Rapid7 Senior Principal Security Researcher Stephen Fewer , and published today in coordination with Microsoft; this vulnerability is the second in a pair of exploits which, when chained together, comprise a critical unauthenticated remote code execution vulnerability in a vulnerable SharePoint server. Patches are available for SharePoint Server Subscription Edition, 2019, and 2016. Alongside today’s coordinated disclosure of CVE-2026-63520 , Rapid7 has now published a detailed technical analysis and proof-of-concept for CVE-2026-55040 , the first vulnerability in the chain. AFD for Winsock: zero-day EoP Rapid7 has previously discussed the Windows Ancillary Function Driver for WinSock, and today it returns to center stage with another exploited-in-the-wild elevation-of-privilege vulnerability. Successful exploitation requires winning a race condition, which increases the difficulty of producing a stable exploit. This also helps keep the CVSS v3 base score down to 7.0, along with a Microsoft proprietary severity ranking of merely important, rather than critical. However, with no user interaction required, and a prize of SYSTEM-level access, CVE-2026-68820 is just what the doctor ordered, if the doctor is based in Pyongyang and wants to steal your cryptocurrency. Microsoft credits CVE-2026-68820 to researchers at Check Point (misspelled “Checkpoint” on the advisory). CVE-2026-68820 isn’t yet listed on CISA KEV, but it will be soon. What’s the opposite of coordinated disclosure? This month’s entry in the ongoing saga of Microsoft vs. a pseudonymous security researcher with a clear dislike of Microsoft comes in the form of CVE-2026-62832 , an elevation of privilege vulnerability in the Windows User Profile Service. Exploitation leads to administrator rights on the local asset, and is achieved via a specially crafted application, which is Microsoft corporate argot for exploit code. Between the public disclosure and the FAQ, which describes an authenticated attacker who has credentials for another account and loads another user’s registry hive, the advisory is a solid match for Nightmare Eclipse’s description of LegacyHive, which Rapid7 discussed last month . Patch Tuesday watchers will have been wondering whether Nightmare Eclipse would continue the pattern of the past few months by dropping yet another zero-day vuln late on Patch Tuesday to maximize friction and inconvenience for Microsoft. Wonder no more, because the new entry on this growing list of headaches is ShieldBreak. Nightmare Eclipse describes ShieldBreak as a full patch bypass for RoguePlanet, a previous entry in the series which Microsoft patched as CVE-2026-50656 during July, a month after its public disclosure. Both vulnerabilities are therefore elevation-of-privilege to SYSTEM vulnerabilities in Defender. Container isolation filesystem driver: isolation failure, tampering CVE-2026-72971 describes a tampering vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys), where abuse of a flaw in the vulnerable driver presumably allows an unauthorized attacker to overwrite certain files. Since this might include an action taken within a container leading to an unauthorized impact outside the container, it might be surprising that the advisory claims no scope change. Presumably Microsoft is leaning on the fact that the vulnerability is within a driver which operates entirely within a single security authority, i.e. kernel space, so there is only one impacted component and no scope change according to the CVSS v3 spec. Still, the low CVSS v3 base score of 5.5 probably isn’t telling the whole story in this case. Vulnerabilities classed as tampering are somewhat rare in the Microsoft corpus, making up just a few dozen of the thousands of unique vulnerabilities which MSRC has ever patched or otherwise addressed. CVE-2026-72971 isn’t mentioned in the Notable CVEs section of the new slimline Security Update Guide. Should it be? Perhaps, because Microsoft is aware of public disclosure in this case, but then again the categorization as tampering means that Microsoft is not currently aware of a path to a more severe impact such as elevation of privilege or code execution. The advisory acknowledges a pair of pseudonymous reporters, who also receive credit on at least 40 other advisories over the past few months, across a wide variety of Windows components and Microsoft Office, including 11 critical vulnerabilities. Edge: update slowdown? Typically, Microsoft patches a fair few browser vulnerabilities between the start of each month and that month’s Patch Tuesday, but not this month. Conspicuous by its absence at the time of Patch Tuesday publication today was Microsoft Edge, which receives regular batches of patches as a downstream consumer of Google Chromium. At the moment of Patch Tuesday publication, the desktop incarnations of Edge last received security patches on July 31, 2026 . Meanwhile, the Chrome Stable Channel received patches for 41 vulnerabilities on August 6, 2026 . Anyone responsible for assets with Microsoft Edge installed will be relieved to know that patches for Edge eventually emerged a few hours later on Patch Tuesday itself, but five days is still a longer unpatched gap between Chrome and Edge than has been typical in the past. Microsoft lifecycle update August is typically a quieter month for Microsoft product lifecycle transitions, and this year continues that pattern. The next lifecycle changes with broad impact occur on October 14, 2026, when Windows 11 24H2 Home & Pro reach end of servicing, and Windows Server 2022 moves to extended support, with free critical security updates continuing, but no further feature development. At the same time, the final curtain falls for Windows Server 2012 and 2012 R2 with the expiry of the third and final year of cash-for-updates Extended Security Update (ESU) program for these aging workhorses. Office 2021 also moves beyond support, including the Long-Term Servicing Channel , with no ESU available in that case. Also in October, Exchange Server 2016 and 2019 will join the “no ESU” club, after two previous six-month reprieves. Presumably, Microsoft really means it this time. Summary charts Summary tables Vulnerabilities by Product Family Apps vulnerabilities CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability Exploitation Less Likely No 7.3 Azure vulnerabilities CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability Exploitation Less Likely No 8.1 CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-47299 Azure Monitor Agent Elevation of Privilege Vulnerability Exploitation Less Likely No 7.2 CVE-2026-65673 Microsoft Entra Connect Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-6726 MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse Exploitation Less Likely No 7.9 CVE-2026-6727 MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability Exploitation Less Likely No 5.9 Browser vulnerabilities CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-70339 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Exploitation Unlikely No 5.4 CVE-2026-19137 CVE-2026-19137 Use after free in WebGL n/a No CVE-2026-19138 CVE-2026-19138 Heap buffer overflow in CrashReporting n/a No CVE-2026-19139 CVE-2026-19139 Race in CredentialProvider n/a No CVE-2026-19140 CVE-2026-19140 Use after free in GPU n/a No CVE-2026-19142 CVE-2026-19142 Use after free in Views n/a No CVE-2026-19144 CVE-2026-19144 Use after free in HTML n/a No CVE-2026-19145 CVE-2026-19145 Use after free in Translate n/a No CVE-2026-19146 CVE-2026-19146 Uninitialized Use in GPU n/a No CVE-2026-19147 CVE-2026-19147 Use after free in Aura n/a No CVE-2026-19148 CVE-2026-19148 Out of bounds write in GPU n/a No CVE-2026-19149 CVE-2026-19149 Use after free in Aura n/a No CVE-2026-19150 CVE-2026-19150 Inappropriate implementation in V8 n/a No CVE-2026-19151 CVE-2026-19151 Use after free in V8 n/a No CVE-2026-19152 CVE-2026-19152 Inappropriate implementation in Navigation n/a No CVE-2026-19153 CVE-2026-19153 Insufficient validation of untrusted input in Workers n/a No CVE-2026-19155 CVE-2026-19155 Use after free in Payments n/a No CVE-2026-19156 CVE-2026-19156 Heap buffer overflow in Base n/a No CVE-2026-19157 CVE-2026-19157 Out of bounds write in ANGLE n/a No CVE-2026-19158 CVE-2026-19158 Use after free in Views n/a No CVE-2026-19159 CVE-2026-19159 Use after free in Views n/a No CVE-2026-19160 CVE-2026-19160 Uninitialized Use in Skia n/a No CVE-2026-19161 CVE-2026-19161 Uninitialized Use in Skia n/a No CVE-2026-19162 CVE-2026-19162 Out of bounds write in V8 n/a No CVE-2026-19163 CVE-2026-19163 Use after free in Media n/a No CVE-2026-19164 CVE-2026-19164 Insufficient validation of untrusted input in Codecs n/a No CVE-2026-19165 CVE-2026-19165 Use after free in Extensions n/a No CVE-2026-19166 CVE-2026-19166 Use after free in Web Authentication n/a No CVE-2026-19167 CVE-2026-19167 Integer overflow in GPU n/a No CVE-2026-19168 CVE-2026-19168 Inappropriate implementation in V8 n/a No CVE-2026-19169 CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks n/a No CVE-2026-19170 CVE-2026-19170 Use after free in WebGL n/a No CVE-2026-19171 CVE-2026-19171 Use after free in Media n/a No CVE-2026-19172 CVE-2026-19172 Use after free in Views n/a No CVE-2026-19173 CVE-2026-19173 Out of bounds write in Skia n/a No CVE-2026-19174 CVE-2026-19174 Integer overflow in V8 n/a No CVE-2026-19175 CVE-2026-19175 Use after free in Payments n/a No CVE-2026-19176 CVE-2026-19176 Use after free in Skia n/a No CVE-2026-19177 CVE-2026-19177 Insufficient validation of untrusted input in UI n/a No Developer Tools vulnerabilities CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-70354 .NET Core Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62901 .NET Denial of Service Vulnerability Exploitation Less Likely No 7.5 CVE-2026-62909 .NET Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-58641 .NET Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62871 .NET Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62886 .NET Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62872 .NET Framework Elevation of Privilege Vulnerability Exploitation Less Likely No 8.8 CVE-2026-65810 .NET Framework Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62897 .NET Framework Remote Code Execution Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62900 .NET Information Disclosure Vulnerability Exploitation Less Likely No 5.9 CVE-2026-62902 .NET Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62899 .NET Security Feature Bypass Vulnerability Exploitation Less Likely No 5.9 CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability Exploitation Less Likely No 7.1 CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62898 Microsoft QUIC Information Disclosure Vulnerability Exploitation Less Likely No 7.5 CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability Exploitation Less Likely No 7.3 CVE-2026-58612 PowerShell Information Disclosure Vulnerability Exploitation Less Likely No 7.4 CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability Exploitation Less Likely No 7.8 CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability Exploitation More Likely No 7.8 CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability Exploitation More Likely No 7.8 CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability Exploitation Less Likely No 8.2 ESU vulnerabilities CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-59130 AMD Zen Information Disclosure Vulnerability Exploitation Less Likely No 5.6 CVE-2026-59131 AMD Zen Information Disclosure Vulnerability Exploitation Less Likely No 5.6 CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62698 Microsoft Digest Authentication Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62912 Microsoft Exchange Server Denial of Service Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.2 CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability Exploitation Less Likely No 8.0 CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability Exploitation Less Likely No 7.3 CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability Exploitation Less Likely No 6.5 CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability Exploitation Less Likely No 6.5 CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-6726 MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse Exploitation Less Likely No 7.9 CVE-2026-6727 MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability Exploitation Less Likely No 5.9 CVE-2026-65671 Remote Access API Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability Exploitation Less Likely No 7.5 CVE-2026-61352 Remote Desktop Client Remote Code Execution Vulnerability Exploitation Less Likely No 7.5 CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability Exploitation Less Likely No 7.5 CVE-2026-62824 Remote Desktop Client Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-54113 Remote Procedure Call Denial of Service Vulnerability Exploitation Unlikely No 7.5 CVE-2026-62781 RPC Runtime Library Remote Code Execution Vulnerability Exploitation Unlikely No 8.1 CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Exploitation Less Likely No 7.0 CVE-2026-62746 Win32k Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62743 Win32k Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62786 Win32k Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-49179 Windows Active Directory Domain Services Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-61348 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Exploitation More Likely No 7.0 CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Exploitation Detected No 7.0 CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Exploitation More Likely No 7.0 CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62713 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62771 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62728 Windows Common Log File System Driver Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability Exploitation Unlikely No 5.5 CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability Exploitation More Likely No 9.8 CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62710 Windows Device Association Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62755 Windows DHCP Client Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62812 Windows DHCP Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62761 Windows DHCP Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62776 Windows DHCP Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62803 Windows DHCP Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62807 Windows DHCP Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62718 Windows DHCP Server Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62715 Windows DHCP Server Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62716 Windows DHCP Server Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62742 Windows DHCP Server Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62745 Windows DHCP Server Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62720 Windows DHCP Server Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62714 Windows DHCP Server Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62814 Windows DHCP Server Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability Exploitation More Likely No 8.8 CVE-2026-61923 Windows Display Enhancement Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability Exploitation Unlikely No 6.7 CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability Exploitation Less Likely No 6.7 CVE-2026-62769 Windows DNS Elevation of Privilege Vulnerability Exploitation Unlikely No 6.7 CVE-2026-62778 Windows DNS Elevation of Privilege Vulnerability Exploitation Less Likely No 8.1 CVE-2026-62881 Windows DNS Elevation of Privilege Vulnerability Exploitation Unlikely No 6.7 CVE-2026-62883 Windows DNS Elevation of Privilege Vulnerability Exploitation Less Likely No 6.7 CVE-2026-65795 Windows DNS Elevation of Privilege Vulnerability Exploitation Unlikely No 6.7 CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability Exploitation Less Likely No 6.7 CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability Exploitation Unlikely No 6.7 CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability Exploitation Less Likely No 6.7 CVE-2026-62787 Windows DNS Server Remote Code Execution Vulnerability Exploitation Unlikely No 7.5 CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability Exploitation Less Likely No 9.8 CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability Exploitation Unlikely No 6.6 CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62888 Windows DWM Core Library Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-59137 Windows Event Logging Service Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-65662 Windows GDI Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-61360 Windows GDI Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62709 Windows GDI+ Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62702 Windows Graphics Kernel Denial of Service Vulnerability Exploitation Less Likely No 6.8 CVE-2026-61346 Windows Graphics Kernel Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62774 Windows Graphics Kernel Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-61928 Windows Hello Tampering Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability Exploitation Unlikely No 6.5 CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62739 Windows HTTP.sys Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62741 Windows HTTP.sys Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-61368 Windows Hyper-V Information Disclosure Vulnerability Exploitation Less Likely No 5.0 CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability Exploitation Unlikely No 7.8 CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-61925 Windows Installer Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-70345 Windows Installer Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-70346 Windows Installer Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-70347 Windows Installer Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65774 Windows Installer Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65796 Windows iSCSI Target Service Denial of Service Vulnerability Exploitation Unlikely No 5.9 CVE-2026-65679 Windows iSCSI Target Service Remote Code Execution Vulnerability Exploitation Less Likely No 8.1 CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability Exploitation Unlikely No 9.8 CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62773 Windows Kerberos Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62752 Windows Kerberos Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-61930 Windows Kernel Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-65773 Windows Kernel Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62785 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-62795 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-62777 Windows License Manager Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-50472 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62719 Windows Message Queuing Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62717 Windows Message Queuing Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65790 Windows Message Queuing Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62707 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-56174 Windows Narrator Braille Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-68819 Windows Network File System Denial of Service Vulnerability Exploitation Unlikely No 5.9 CVE-2026-62797 Windows NTFS Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62700 Windows NTFS Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-61350 Windows NTFS Information Disclosure Vulnerability Exploitation Less Likely No 4.6 CVE-2026-62796 Windows NTFS Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-65784 Windows NTFS Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-62793 Windows NTFS Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-62887 Windows NTFS Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62751 Windows Projected File System Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-61924 Windows Remote Desktop Client Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-61918 Windows Remote Desktop Client Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-61921 Windows Remote Desktop Client Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-61356 Windows Remote Desktop Services Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-61367 Windows Remote Desktop Services Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Exploitation Less Likely No 8.1 CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability Exploitation Unlikely No 5.3 CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Exploitation Less Likely No 8.1 CVE-2026-61355 Windows Sensor Data Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62770 Windows Shell Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62782 Windows SMB Client Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62800 Windows SMBv3 Server Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-62790 Windows SMBv3 Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-59132 Windows TCP/IP Denial of Service Vulnerability Exploitation More Likely No 7.5 CVE-2026-62792 Windows TCP/IP Remote Code Execution Vulnerability Exploitation Unlikely No 8.1 CVE-2026-61353 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62724 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-59122 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62701 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62725 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62726 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability Exploitation Less Likely No 6.8 CVE-2026-61926 Windows USB Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability Exploitation More Likely Yes 7.8 CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62712 Windows Win32k Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62876 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65678 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62711 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62733 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62885 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62730 Windows Wired AutoConfig Service Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 Microsoft Dynamics vulnerabilities CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability Exploitation Less Likely No 6.5 Microsoft Office vulnerabilities CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-64906 Microsoft Access Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64912 Microsoft Access Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64908 Microsoft Access Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64914 Microsoft Access Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64920 Microsoft Access Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64919 Microsoft Access Remote Code Execution Vulnerability Exploitation Unlikely No 7.8 CVE-2026-68802 Microsoft Excel Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-68808 Microsoft Excel Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-68813 Microsoft Excel Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-70318 Microsoft Excel Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-70327 Microsoft Excel Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-70328 Microsoft Excel Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-68797 Microsoft Excel Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-68799 Microsoft Excel Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-65807 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-68793 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68794 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68795 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68796 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68800 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68807 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68806 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68810 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68811 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68815 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68816 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68798 Microsoft Excel Remote Code Execution Vulnerability Exploitation Unlikely No 7.8 CVE-2026-68801 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68803 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68805 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68812 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68814 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68817 Microsoft Excel Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68792 Microsoft Office Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-63517 Microsoft Office Graphics Component Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62842 Microsoft Office Graphics Component Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-66809 Microsoft Office Graphics Component Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-63519 Microsoft Office Graphics Component Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65664 Microsoft Office Graphics Component Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-63526 Microsoft Office Graphics Component Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-70315 Microsoft Office Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-70314 Microsoft Office Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-70317 Microsoft Office Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-70323 Microsoft Office Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-63524 Microsoft Office Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-63529 Microsoft Office Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-64899 Microsoft Office Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-63515 Microsoft Office Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65657 Microsoft Office Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65656 Microsoft Office Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65661 Microsoft Office Remote Code Execution Vulnerability Exploitation Unlikely No 7.8 CVE-2026-63532 Microsoft Office Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-63533 Microsoft Office Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64898 Microsoft Office Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64903 Microsoft Office Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64904 Microsoft Office Remote Code Execution Vulnerability Exploitation Unlikely No 7.8 CVE-2026-64909 Microsoft Office Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64910 Microsoft Office Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64911 Microsoft Office Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-70130 Microsoft Office Remote Code Execution Vulnerability Exploitation Less Likely No 8.4 CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability Exploitation Less Likely No 8.0 CVE-2026-70306 Microsoft Office SharePoint Spoofing Vulnerability Exploitation Less Likely No 9.3 CVE-2026-63521 Microsoft Office Word Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-70319 Microsoft Office Word Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-63528 Microsoft Office Word Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-63530 Microsoft Office Word Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-63531 Microsoft Office Word Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-64917 Microsoft Office Word Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-66806 Microsoft Office Word Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-66810 Microsoft Office Word Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-63518 Microsoft Office Word Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-70311 Microsoft Office Word Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-63525 Microsoft Office Word Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-63527 Microsoft Office Word Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64905 Microsoft Office Word Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64907 Microsoft Office Word Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-64915 Microsoft Office Word Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability Exploitation Less Likely No 6.7 CVE-2026-70329 Microsoft Outlook Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-62882 Microsoft Outlook Spoofing Vulnerability Exploitation Unlikely No 4.3 CVE-2026-70313 Microsoft PowerPoint Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability Exploitation Less Likely No 8.8 CVE-2026-70321 Microsoft SharePoint Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploitation Less Likely No 8.8 CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploitation More Likely No 7.3 CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploitation Less Likely No 8.8 CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability Exploitation More Likely No 8.1 CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-65663 Microsoft SharePoint Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability Exploitation More Likely No 8.8 CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-66805 Microsoft SharePoint Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability Exploitation Less Likely No 4.6 CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability Exploitation Less Likely No 6.5 CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability Exploitation Less Likely No 4.6 CVE-2026-65660 Microsoft SharePoint Server Spoofing Vulnerability Exploitation Less Likely No 6.5 CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability Exploitation Less Likely No 4.6 CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability N/A No 7.3 CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability N/A No 4.6 CVE-2026-64916 Microsoft SharePoint Server Spoofing Vulnerability Exploitation Unlikely No 4.6 CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability Exploitation Less Likely No 4.6 CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability Exploitation Less Likely No 6.5 CVE-2026-65767 Microsoft Teams for Android and iOS Spoofing Vulnerability Exploitation Less Likely No 8.8 CVE-2026-65769 Microsoft Teams iOS Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-65768 Microsoft Teams Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-70310 Microsoft Word Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-58651 Microsoft Word Remote Code Execution Vulnerability Exploitation Less Likely No 7.8 CVE-2026-68809 Powerpoint Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-70312 Powerpoint Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-70316 Powerpoint Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-70325 Powerpoint Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-70320 Powerpoint Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-70322 Powerpoint Information Disclosure Vulnerability Exploitation Less Likely No 5.5 Server Software vulnerabilities CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-62912 Microsoft Exchange Server Denial of Service Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.2 CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability Exploitation Less Likely No 8.0 CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability Exploitation Less Likely No 7.3 SQL Server vulnerabilities CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-65811 Power BI Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 System Center vulnerabilities CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-54123 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability Exploitation Less Likely No 5.5 Windows vulnerabilities CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-65777 Active Directory Security Feature Bypass Vulnerability Exploitation Unlikely No 5.3 CVE-2026-59130 AMD Zen Information Disclosure Vulnerability Exploitation Less Likely No 5.6 CVE-2026-59131 AMD Zen Information Disclosure Vulnerability Exploitation Less Likely No 5.6 CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability Exploitation More Likely No 7.0 CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62698 Microsoft Digest Authentication Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-59133 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability Exploitation More Likely No 8.8 CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability Exploitation More Likely No 9.8 CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability N/A No 9.8 CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability Exploitation Less Likely No 6.5 CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability Exploitation Less Likely No 6.5 CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-6726 MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse Exploitation Less Likely No 7.9 CVE-2026-6727 MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability Exploitation Less Likely No 5.9 CVE-2026-65671 Remote Access API Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65672 Remote Access API Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability Exploitation Less Likely No 7.5 CVE-2026-61352 Remote Desktop Client Remote Code Execution Vulnerability Exploitation Less Likely No 7.5 CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability Exploitation Less Likely No 7.5 CVE-2026-62824 Remote Desktop Client Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-54113 Remote Procedure Call Denial of Service Vulnerability Exploitation Unlikely No 7.5 CVE-2026-62781 RPC Runtime Library Remote Code Execution Vulnerability Exploitation Unlikely No 8.1 CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Exploitation Less Likely No 7.0 CVE-2026-62746 Win32k Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62798 Win32k Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-62743 Win32k Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62786 Win32k Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-49179 Windows Active Directory Domain Services Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-61348 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Exploitation More Likely No 7.0 CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Exploitation Detected No 7.0 CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Exploitation More Likely No 7.0 CVE-2026-65783 Windows Autopilot Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-65780 Windows Autopilot Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-65778 Windows Autopilot Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-65782 Windows Autopilot Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-65781 Windows Autopilot Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-61927 Windows Bind Filter Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-61934 Windows Bind Filter Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62705 Windows Bind Filter Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62722 Windows Bind Filter Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62713 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62771 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62728 Windows Common Log File System Driver Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62772 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62775 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-72971 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability Exploitation Unlikely Yes 5.5 CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability Exploitation Unlikely No 5.5 CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability Exploitation More Likely No 9.8 CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62710 Windows Device Association Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability Exploitation Less Likely No 8.1 CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability Exploitation Less Likely No 8.1 CVE-2026-65785 Windows DHCP Client Denial of Service Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62755 Windows DHCP Client Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62736 Windows DHCP Client Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-61361 Windows DHCP Client Remote Code Execution Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62812 Windows DHCP Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62761 Windows DHCP Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62776 Windows DHCP Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62803 Windows DHCP Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62807 Windows DHCP Server Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62718 Windows DHCP Server Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62715 Windows DHCP Server Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62716 Windows DHCP Server Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62742 Windows DHCP Server Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62745 Windows DHCP Server Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62720 Windows DHCP Server Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62714 Windows DHCP Server Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62814 Windows DHCP Server Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability Exploitation More Likely No 8.8 CVE-2026-61923 Windows Display Enhancement Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability Exploitation Unlikely No 6.7 CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability Exploitation Less Likely No 6.7 CVE-2026-62769 Windows DNS Elevation of Privilege Vulnerability Exploitation Unlikely No 6.7 CVE-2026-62778 Windows DNS Elevation of Privilege Vulnerability Exploitation Less Likely No 8.1 CVE-2026-62881 Windows DNS Elevation of Privilege Vulnerability Exploitation Unlikely No 6.7 CVE-2026-62883 Windows DNS Elevation of Privilege Vulnerability Exploitation Less Likely No 6.7 CVE-2026-65795 Windows DNS Elevation of Privilege Vulnerability Exploitation Unlikely No 6.7 CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability Exploitation Less Likely No 6.7 CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability Exploitation Unlikely No 6.7 CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability Exploitation Less Likely No 6.7 CVE-2026-62787 Windows DNS Server Remote Code Execution Vulnerability Exploitation Unlikely No 7.5 CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.1 CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability Exploitation Less Likely No 9.8 CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability Exploitation Unlikely No 8.1 CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability Exploitation Unlikely No 6.6 CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62888 Windows DWM Core Library Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-59137 Windows Event Logging Service Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-65662 Windows GDI Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-61360 Windows GDI Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62709 Windows GDI+ Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62702 Windows Graphics Kernel Denial of Service Vulnerability Exploitation Less Likely No 6.8 CVE-2026-61346 Windows Graphics Kernel Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62774 Windows Graphics Kernel Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-61928 Windows Hello Tampering Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability Exploitation Unlikely No 6.5 CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62739 Windows HTTP.sys Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62741 Windows HTTP.sys Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62811 Windows HTTP.sys Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-61368 Windows Hyper-V Information Disclosure Vulnerability Exploitation Less Likely No 5.0 CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability Exploitation Unlikely No 7.8 CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-61925 Windows Installer Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-70345 Windows Installer Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-70346 Windows Installer Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-70347 Windows Installer Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65774 Windows Installer Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65681 Windows iSCSI Target Service Denial of Service Vulnerability Exploitation Less Likely No 7.5 CVE-2026-65796 Windows iSCSI Target Service Denial of Service Vulnerability Exploitation Unlikely No 5.9 CVE-2026-65679 Windows iSCSI Target Service Remote Code Execution Vulnerability Exploitation Less Likely No 8.1 CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability Exploitation Unlikely No 9.8 CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62766 Windows Kerberos Elevation of Privilege Vulnerability Exploitation More Likely No 7.0 CVE-2026-62773 Windows Kerberos Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62752 Windows Kerberos Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-61930 Windows Kernel Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-61929 Windows Kernel Elevation of Privilege Vulnerability Exploitation More Likely No 7.0 CVE-2026-62708 Windows Kernel Elevation of Privilege Vulnerability Exploitation Unlikely No 6.4 CVE-2026-62749 Windows Kernel Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62780 Windows Kernel Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62788 Windows Kernel Elevation of Privilege Vulnerability Exploitation More Likely No 7.0 CVE-2026-65773 Windows Kernel Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62785 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-62795 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-62777 Windows License Manager Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-50472 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-70348 Windows Management Services Denial of Service Vulnerability Exploitation Less Likely No 5.5 CVE-2026-62719 Windows Message Queuing Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62717 Windows Message Queuing Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65790 Windows Message Queuing Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability Exploitation More Likely No 7.8 CVE-2026-62693 Windows MIDI Service Module Elevation of Privileges Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62707 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-56174 Windows Narrator Braille Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-56179 Windows Network Address Translation (NAT) Spoofing Vulnerability Exploitation Less Likely No 8.3 CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-68819 Windows Network File System Denial of Service Vulnerability Exploitation Unlikely No 5.9 CVE-2026-62797 Windows NTFS Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62700 Windows NTFS Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-61350 Windows NTFS Information Disclosure Vulnerability Exploitation Less Likely No 4.6 CVE-2026-62796 Windows NTFS Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-65784 Windows NTFS Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-62793 Windows NTFS Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-62887 Windows NTFS Information Disclosure Vulnerability Exploitation Unlikely No 5.5 CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62751 Windows Projected File System Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-61924 Windows Remote Desktop Client Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-61918 Windows Remote Desktop Client Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-61921 Windows Remote Desktop Client Information Disclosure Vulnerability Exploitation Less Likely No 6.5 CVE-2026-61356 Windows Remote Desktop Services Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-61367 Windows Remote Desktop Services Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Exploitation Less Likely No 8.1 CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability Exploitation Unlikely No 5.3 CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Exploitation Less Likely No 8.1 CVE-2026-61355 Windows Sensor Data Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62770 Windows Shell Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62782 Windows SMB Client Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability Exploitation Unlikely No 6.5 CVE-2026-62800 Windows SMBv3 Server Remote Code Execution Vulnerability Exploitation Unlikely No 8.8 CVE-2026-62790 Windows SMBv3 Server Remote Code Execution Vulnerability Exploitation Less Likely No 8.8 CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-59132 Windows TCP/IP Denial of Service Vulnerability Exploitation More Likely No 7.5 CVE-2026-62792 Windows TCP/IP Remote Code Execution Vulnerability Exploitation Unlikely No 8.1 CVE-2026-61353 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62724 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-59122 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62701 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62725 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62726 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.0 CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability Exploitation Less Likely No 6.8 CVE-2026-61926 Windows USB Driver Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability Exploitation More Likely Yes 7.8 CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62712 Windows Win32k Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-62876 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65678 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62711 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62733 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-62885 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability Exploitation More Likely No 7.8 CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 CVE-2026-62730 Windows Wired AutoConfig Service Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability Exploitation Unlikely No 7.8 CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability Exploitation Less Likely No 7.0 Zero-Day Vulnerabilities: Known Exploited CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Exploitation Detected No 7.0 Zero-Day Vulnerabilities: Publicly Disclosed (No known exploitation) CVE Title Exploitation status Publicly disclosed? CVSS v3 base score CVE-2026-72971 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability Exploitation Unlikely Yes 5.5 CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability Exploitation More Likely Yes 7.8