{"release":"2026-Aug","releaseDate":"2026-08-11","source":"https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Aug","sourceHuman":"https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug","note":"Built from Microsoft's CVRF document for this release, not from the Security Update Guide's thirty-day view, which mixes in the previous month's tail. Severity, impact, CVSS, assigning authority and exploitation status are Microsoft's own classification, carried through unchanged.","licence":"Facts, not copyrightable. Reuse freely; a link back is appreciated.","counts":{"total":420,"totalWithThirdParty":790,"thirdParty":370,"exploited":1,"publiclyDisclosed":2,"requiringCustomerAction":400,"noCustomerActionRequired":20,"bySeverity":{"Unknown":1,"Important":356,"Critical":62,"Moderate":1},"byImpact":{"Unknown":1,"Information Disclosure":85,"Elevation of Privilege":176,"Remote Code Execution":111,"Denial of Service":12,"Security Feature Bypass":11,"Spoofing":20,"Tampering":4}},"items":[{"cve":"CVE-2024-26464","title":"","product":"cbl2 net-snmp 5.9.4-1","family":"Mariner","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2024-31745","title":"","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"cve@mitre.org","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2025-49506","title":"Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"apache","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-15534","title":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"CPANSec","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-18477","title":"Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-18508","title":"Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-18739","title":"Popt-devel: popt-static: off-by-one in poptstuffargs","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-18839","title":"Popt-devel: popt-static: size_t underflow in singleoptionhelp","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.2,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19023","title":"HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"HDFG","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19024","title":"HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"HDFG","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19025","title":"HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"HDFG","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19026","title":"Nbit filter NULL/short parameter-array dereference","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"HDFG","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19027","title":"HDF5 out-of-bounds heap read in N-Bit filter decompression","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"HDFG","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19028","title":"HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"HDFG","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19137","title":"CVE-2026-19137 Use after free in WebGL","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19138","title":"CVE-2026-19138 Heap buffer overflow in CrashReporting","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19139","title":"CVE-2026-19139 Race in CredentialProvider","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19140","title":"CVE-2026-19140 Use after free in GPU","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19142","title":"CVE-2026-19142 Use after free in Views","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19144","title":"CVE-2026-19144 Use after free in HTML","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19145","title":"CVE-2026-19145 Use after free in Translate","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19146","title":"CVE-2026-19146 Uninitialized Use in GPU","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19147","title":"CVE-2026-19147 Use after free in Aura","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19148","title":"CVE-2026-19148 Out of bounds write in GPU","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19149","title":"CVE-2026-19149 Use after free in Aura","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19150","title":"CVE-2026-19150 Inappropriate implementation in V8","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19151","title":"CVE-2026-19151 Use after free in V8","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19152","title":"CVE-2026-19152 Inappropriate implementation in Navigation","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19153","title":"CVE-2026-19153 Insufficient validation of untrusted input in Workers","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19155","title":"CVE-2026-19155 Use after free in Payments","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19156","title":"CVE-2026-19156 Heap buffer overflow in Base","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19157","title":"CVE-2026-19157 Out of bounds write in ANGLE","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19158","title":"CVE-2026-19158 Use after free in Views","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19159","title":"CVE-2026-19159 Use after free in Views","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19160","title":"CVE-2026-19160 Uninitialized Use in Skia","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19161","title":"CVE-2026-19161 Uninitialized Use in Skia","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19162","title":"CVE-2026-19162 Out of bounds write in V8","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19163","title":"CVE-2026-19163 Use after free in Media","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19164","title":"CVE-2026-19164 Insufficient validation of untrusted input in Codecs","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19165","title":"CVE-2026-19165 Use after free in Extensions","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19166","title":"CVE-2026-19166 Use after free in Web Authentication","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19167","title":"CVE-2026-19167 Integer overflow in GPU","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19168","title":"CVE-2026-19168 Inappropriate implementation in V8","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19169","title":"CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19170","title":"CVE-2026-19170 Use after free in WebGL","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19171","title":"CVE-2026-19171 Use after free in Media","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19172","title":"CVE-2026-19172 Use after free in Views","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19173","title":"CVE-2026-19173 Out of bounds write in Skia","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19174","title":"CVE-2026-19174 Integer overflow in V8","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19175","title":"CVE-2026-19175 Use after free in Payments","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19176","title":"CVE-2026-19176 Use after free in Skia","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19177","title":"CVE-2026-19177 Insufficient validation of untrusted input in UI","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-20337","title":"ClamAV ZIP File Format Processing Memory Corruption Vulnerability","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"cisco","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-20338","title":"ClamAV ZIP File Format Processing Memory Corruption Vulnerability","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"cisco","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-20339","title":"ClamAV PESpin File Format Processing Integer Overflow Vulnerability","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"cisco","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-20345","title":"ClamAV GPT File Format Processing Memory Corruption Vulnerability","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"cisco","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-20346","title":"ClamAV PDF File Format Processing Memory Corruption Vulnerability","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"cisco","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-20347","title":"ClamAV Mach-O File Format Processing Memory Corruption Vulnerability","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"cisco","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-20348","title":"ClamAV XAR File Format Processing Memory Corruption Vulnerability","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"cisco","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-32327","title":"Apache Portable Runtime Utility: apr-util XML stack recursion crash","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"apache","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-34191","title":"Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"apache","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-34501","title":"Apache Portable Runtime Utility: Heap buffer overflow in APR redis client","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"apache","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-34502","title":"Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"apache","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-40375","title":"Microsoft Dynamics Business Central Information Disclosure Vulnerability","product":"Dynamics Business Central","family":"Microsoft Dynamics","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-42976","title":"Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability","product":"Windows RPC API","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-44605","title":"Rpm: heap buffer overflow in ndb slot table parsing","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-47243","title":"Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-47285","title":"Visual Studio Code Information Disclosure Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-47299","title":"Azure Monitor Agent Elevation of Privilege Vulnerability","product":"Azure Monitor Agent","family":"Azure","impact":"Elevation of Privilege","severity":"Important","cvss":7.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-49163","title":"Application Insights Profiler Elevation of Privilege Vulnerability","product":"Application Insights Profiler","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-49179","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","product":"Windows Active Directory","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-50472","title":"Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability","product":"Windows LUAFV","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-50481","title":"Azure Active Directory Elevation of Privilege Vulnerability","product":"Azure Active Directory","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":9.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-50515","title":"Azure Service Bus Remote Code Execution Vulnerability","product":"Azure Service Bus","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":9.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-50516","title":"Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability","product":"Microsoft Azure Kubernetes Service","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":9.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-50540","title":"Kata Containers: Config Path Annotation Arbitrary File Loading","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-54113","title":"Remote Procedure Call Denial of Service Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-54123","title":"Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability","product":"Microsoft Defender for Endpoint","family":"System Center","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-54876","title":"Client-Side Memory Leak in OCSP Response Checking","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"openssl","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-54981","title":"Visual Studio Code Python Extension Security Feature Bypass Vulnerability","product":"Visual Studio Code - Python extension","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-54984","title":"Windows Imaging Component Remote Code Execution Vulnerability","product":"Windows Imaging Component","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-56161","title":"Azure Logic Apps Information Disclosure Vulnerability","product":"Azure Logic Apps","family":"Azure","impact":"Information Disclosure","severity":"Critical","cvss":9.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-56162","title":"Azure SQL Database Elevation of Privilege Vulnerability","product":"Azure SQL Database","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":10,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-56174","title":"Windows Narrator Braille Elevation of Privilege Vulnerability","product":"Windows Narrator Braille","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-56179","title":"Windows Network Address Translation (NAT) Spoofing Vulnerability","product":"Windows Network Address Translation (NAT)","family":"Windows","impact":"Spoofing","severity":"Moderate","cvss":8.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-57104","title":"Azure Storage Explorer Elevation of Privilege Vulnerability","product":"Azure Storage Explorer","family":"Open Source Software","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-57105","title":"Microsoft Office SharePoint Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-58612","title":"PowerShell Information Disclosure Vulnerability","product":"Microsoft PowerShell Core","family":"Developer Tools","impact":"Information Disclosure","severity":"Important","cvss":7.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-58639","title":"Microsoft SharePoint Server Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-58641","title":".NET Elevation of Privilege Vulnerability","product":".NET","family":"Developer Tools","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-58650","title":"Visual Studio Code Security Feature Bypass Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-58651","title":"Microsoft Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59113","title":"Visual Studio Code Remote Code Execution Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59115","title":"Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability","product":"Microsoft Entra Provisioning Service (SyncFabric)","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":9.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-59118","title":"Copilot Cowork Elevation of Privilege Vulnerability","product":"Copilot Cowork","family":"Microsoft Dynamics","impact":"Elevation of Privilege","severity":"Critical","cvss":9.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-59119","title":"PowerShell Elevation of Privilege Vulnerability","product":"Microsoft PowerShell","family":"Developer Tools","impact":"Elevation of Privilege","severity":"Important","cvss":7.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59122","title":"Windows Telephony Service Elevation of Privilege Vulnerability","product":"Windows Telephony Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59124","title":"Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability","product":"Microsoft High Performance Computing (HPC) Pack","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59125","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","product":"Virtual Hard Disk (VHD) Miniport Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59126","title":"Windows Event Logging Service Elevation of Privilege Vulnerability","product":"Windows Event Logging Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59127","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59128","title":"Windows Encrypting File System (EFS) Information Disclosure Vulnerability","product":"Windows Encrypting File System (EFS)","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59130","title":"AMD Zen Information Disclosure Vulnerability","product":"AMD Zen","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59131","title":"AMD Zen Information Disclosure Vulnerability","product":"AMD Zen","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59132","title":"Windows TCP/IP Denial of Service Vulnerability","product":"Windows TCP/IP","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59133","title":"Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability","product":"Microsoft High Performance Computing (HPC) Pack","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59134","title":"Remote Desktop Client Remote Code Execution Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59135","title":"Microsoft Windows Search Component Information Disclosure Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59136","title":"Microsoft COM for Windows Information Disclosure Vulnerability","product":"Microsoft COM for Windows","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59137","title":"Windows Event Logging Service Information Disclosure Vulnerability","product":"Windows Event Logging Service","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59138","title":"Microsoft Remote Registry Service Denial of Service Vulnerability","product":"Microsoft Remote Registry Service","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61345","title":"Microsoft Remote Registry Service Denial of Service Vulnerability","product":"Microsoft Remote Registry Service","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61346","title":"Windows Graphics Kernel Elevation of Privilege Vulnerability","product":"Windows Graphics Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61347","title":"Windows Event Logging Service Information Disclosure Vulnerability","product":"Windows Event Logging Service","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61348","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","product":"Windows Ancillary Function Driver for WinSock","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61349","title":"Windows Work Folder Service Elevation of Privilege Vulnerability","product":"Windows Work Folder Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61350","title":"Windows NTFS Information Disclosure Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61352","title":"Remote Desktop Client Remote Code Execution Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61353","title":"Windows Telephony Service Elevation of Privilege Vulnerability","product":"Windows Telephony Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61355","title":"Windows Sensor Data Service Elevation of Privilege Vulnerability","product":"Windows Sensor Data Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61356","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61357","title":"Application Information Services Elevation of Privilege Vulnerability","product":"Application Information Services","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61358","title":"Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability","product":"Windows Accessibility Infrastructure (ATBroker.exe)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61359","title":"Windows Storage Elevation of Privilege Vulnerability","product":"Windows Storage","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61360","title":"Windows GDI Information Disclosure Vulnerability","product":"Windows GDI","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61361","title":"Windows DHCP Client Remote Code Execution Vulnerability","product":"Windows DHCP Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61363","title":"Remote Desktop Client Remote Code Execution Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61364","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61365","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61366","title":"Windows Network Connection Broker Elevation of Privilege Vulnerability","product":"Windows Network Connection Broker","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61367","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61368","title":"Windows Hyper-V Information Disclosure Vulnerability","product":"Windows Hyper-V","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61477","title":"Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Unknown","cvss":2.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-61918","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61920","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61921","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61923","title":"Windows Display Enhancement Service Elevation of Privilege Vulnerability","product":"Windows Display Enhancement Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61924","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61925","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61926","title":"Windows USB Driver Elevation of Privilege Vulnerability","product":"Windows USB Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61927","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","product":"Windows Bind Filter Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61928","title":"Windows Hello Tampering Vulnerability","product":"Windows Hello","family":"Windows","impact":"Tampering","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61929","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61930","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61932","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","product":"Windows DWM Core Library","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61933","title":"Windows DWM Core Library Information Disclosure Vulnerability","product":"Windows DWM Core Library","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61934","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","product":"Windows Bind Filter Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61936","title":"Windows Defender Firewall Service Security Feature Bypass Vulnerability","product":"Windows Defender Firewall Service","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61937","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","product":"Windows HTTP.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61938","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-61939","title":"Winlogon Elevation of Privilege Vulnerability","product":"Winlogon","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62688","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","product":"Windows MIDI Service Module","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62690","title":"Windows Push Notifications Elevation of Privilege Vulnerability","product":"Windows Push Notifications","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62692","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62693","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","product":"Windows MIDI Service Module","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62695","title":"Windows Storage Elevation of Privilege Vulnerability","product":"Windows Storage","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62696","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","product":"Windows Program Compatibility Assistant Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62698","title":"Microsoft Digest Authentication Elevation of Privilege Vulnerability","product":"Microsoft Digest Authentication","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62699","title":"Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability","product":"Windows Universal Disk Format File System Driver (UDFS)","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62700","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62701","title":"Windows Telephony Service Elevation of Privilege Vulnerability","product":"Windows Telephony Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62702","title":"Windows Graphics Kernel Denial of Service Vulnerability","product":"Windows Graphics Kernel","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62703","title":"Windows DWM Core Library Information Disclosure Vulnerability","product":"Windows DWM Core Library","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62705","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","product":"Windows Bind Filter Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62707","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","product":"Windows Modern Device Management (MDM)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62708","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62709","title":"Windows GDI+ Information Disclosure Vulnerability","product":"Windows GDI+","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62710","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62711","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62712","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62713","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","product":"Windows Cloud Files Mini Filter Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62714","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62715","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62716","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62717","title":"Windows Message Queuing Elevation of Privilege Vulnerability","product":"Windows Message Queuing","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62718","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62719","title":"Windows Message Queuing Elevation of Privilege Vulnerability","product":"Windows Message Queuing","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62720","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62721","title":"Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability","product":"User-Mode Power Service (UMPS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62722","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","product":"Windows Bind Filter Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62723","title":"Windows Telephony Service Elevation of Privilege Vulnerability","product":"Windows Telephony Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62724","title":"Windows Telephony Service Elevation of Privilege Vulnerability","product":"Windows Telephony Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62725","title":"Windows Telephony Service Elevation of Privilege Vulnerability","product":"Windows Telephony Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62726","title":"Windows Telephony Service Elevation of Privilege Vulnerability","product":"Windows Telephony Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62728","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","product":"Windows Common Log File System Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62729","title":"Windows Telephony Service Elevation of Privilege Vulnerability","product":"Windows Telephony Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62730","title":"Windows Wired AutoConfig Service Information Disclosure Vulnerability","product":"Windows Wired AutoConfig Service","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62732","title":"Windows Telephony Service Elevation of Privilege Vulnerability","product":"Windows Telephony Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62733","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62734","title":"Windows Telephony Service Elevation of Privilege Vulnerability","product":"Windows Telephony Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62735","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","product":"Windows HTTP.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62736","title":"Windows DHCP Client Elevation of Privilege Vulnerability","product":"Windows DHCP Client","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62737","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62738","title":"Windows Management Instrumentation Information Disclosure Vulnerability","product":"Windows Management Instrumentation","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62739","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","product":"Windows HTTP.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62740","title":"Windows Imaging Component Information Disclosure Vulnerability","product":"Windows Imaging Component","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62741","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","product":"Windows HTTP.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62742","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62743","title":"Win32k Information Disclosure Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62745","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62746","title":"Win32k Information Disclosure Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62747","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62748","title":"Windows Telephony Service Elevation of Privilege Vulnerability","product":"Windows Telephony Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62749","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62750","title":"Windows HTTP Protocol Stack Tampering Vulnerability","product":"Windows HTTP Protocol Stack","family":"Windows","impact":"Tampering","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62751","title":"Windows Projected File System Elevation of Privilege Vulnerability","product":"Windows Projected File System","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62752","title":"Windows Kerberos Elevation of Privilege Vulnerability","product":"Windows Kerberos","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62753","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","product":"Windows HTTP.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62754","title":"Windows Kerberos Elevation of Privilege Vulnerability","product":"Windows Kerberos","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62755","title":"Windows DHCP Client Elevation of Privilege Vulnerability","product":"Windows DHCP Client","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62757","title":"Windows Schannel Security Feature Bypass Vulnerability","product":"Windows Schannel","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":5.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62758","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","product":"Windows Remote Access Connection Manager","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62761","title":"Windows DHCP Server Elevation of Privilege Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62766","title":"Windows Kerberos Elevation of Privilege Vulnerability","product":"Windows Kerberos","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62768","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62769","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62770","title":"Windows Shell Elevation of Privilege Vulnerability","product":"Windows Shell","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62771","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","product":"Windows Cloud Files Mini Filter Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62772","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability","product":"Windows Container Isolation FS Filter Driver (unionfs.sys)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62773","title":"Windows Kerberos Elevation of Privilege Vulnerability","product":"Windows Kerberos","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62774","title":"Windows Graphics Kernel Elevation of Privilege Vulnerability","product":"Windows Graphics Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62775","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability","product":"Windows Container Isolation FS Filter Driver (unionfs.sys)","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62776","title":"Windows DHCP Server Elevation of Privilege Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62777","title":"Windows License Manager Elevation of Privilege Vulnerability","product":"Windows License Manager","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62778","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62779","title":"Windows Schannel Elevation of Privilege Vulnerability","product":"Windows Schannel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62780","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62781","title":"RPC Runtime Library Remote Code Execution Vulnerability","product":"RPC Runtime","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62782","title":"Windows SMB Client Information Disclosure Vulnerability","product":"Windows SMB Client","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62783","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","product":"Windows Remote Access Connection Manager","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62784","title":"Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability","product":"Microsoft Local Security Authority Server (lsasrv)","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62785","title":"Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability","product":"Windows LDAP - Lightweight Directory Access Protocol","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62786","title":"Win32k Information Disclosure Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62787","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62788","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62790","title":"Windows SMBv3 Server Remote Code Execution Vulnerability","product":"Windows SMB Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62792","title":"Windows TCP/IP Remote Code Execution Vulnerability","product":"Windows TCP/IP","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62793","title":"Windows NTFS Information Disclosure Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62795","title":"Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability","product":"Windows LDAP - Lightweight Directory Access Protocol","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62796","title":"Windows NTFS Information Disclosure Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62797","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62798","title":"Win32k Information Disclosure Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62799","title":"Windows SMB Client Elevation of Privilege Vulnerability","product":"Windows SMB Client","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62800","title":"Windows SMBv3 Server Remote Code Execution Vulnerability","product":"Windows SMB Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62803","title":"Windows DHCP Server Elevation of Privilege Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62807","title":"Windows DHCP Server Elevation of Privilege Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62811","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","product":"Windows HTTP.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62812","title":"Windows DHCP Server Elevation of Privilege Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62814","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62815","title":"Microsoft QUIC Remote Code Execution Vulnerability","product":"Microsoft QUIC","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62816","title":"Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","product":"Reliable Multicast Transport Driver (RMCAST)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62817","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62818","title":"Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability","product":"Active Directory Certificate Services (AD CS)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62819","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","product":"Windows Routing and Remote Access Service (RRAS)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62820","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62822","title":"Windows GDI+ Remote Code Execution Vulnerability","product":"Windows GDI+","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62823","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62824","title":"Remote Desktop Client Remote Code Execution Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62827","title":"Microsoft SharePoint Server Elevation of Privilege Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62829","title":"Microsoft SharePoint Server Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62830","title":"Azure SRE Agent Elevation of Privilege Vulnerability","product":"Azure SRE Agent","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":9.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-62832","title":"Windows User Profile Service Elevation of Privilege Vulnerability","product":"Windows User Profile Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":true,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62836","title":"Azure SQL Managed Instance Elevation of Privilege Vulnerability","product":"Azure SQL Managed Instance","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Critical","cvss":8.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-62837","title":"Microsoft SharePoint Server Information Disclosure Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62839","title":"Microsoft SharePoint Server Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62842","title":"Microsoft Office Graphics Component Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62869","title":"Azure Entra ID Spoofing Vulnerability","product":"Azure Entra ID","family":"Azure","impact":"Spoofing","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-62871","title":".NET Elevation of Privilege Vulnerability","product":".NET","family":"Developer Tools","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62872","title":".NET Framework Elevation of Privilege Vulnerability","product":".NET Framework","family":"Developer Tools","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62873","title":"Microsoft 365 Admin Center Elevation of Privilege Vulnerability","product":"Microsoft 365 Admin Center","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-62876","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62877","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62878","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62880","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62881","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62882","title":"Microsoft Outlook Spoofing Vulnerability","product":"Microsoft Office Outlook","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62883","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62885","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62886","title":".NET Elevation of Privilege Vulnerability","product":".NET","family":"Developer Tools","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62887","title":"Windows NTFS Information Disclosure Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62888","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","product":"Windows DWM Core Library","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62889","title":"Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability","product":"Windows Secure Socket Tunneling Protocol (SSTP)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62890","title":"Windows GDI+ Elevation of Privilege Vulnerability","product":"Windows GDI+","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62892","title":"Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability","product":"Capability Access Management Service (camsvc)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62893","title":"Windows Deployment Services TFTP Server Remote Code Execution Vulnerability","product":"Windows Deployment Services","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62894","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","product":"Windows DWM Core Library","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62896","title":"Microsoft Teams Elevation of Privilege Vulnerability","product":"Microsoft Teams","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Critical","cvss":9.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-62897","title":".NET Framework Remote Code Execution Vulnerability","product":".NET Framework","family":"Developer Tools","impact":"Remote Code Execution","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62898","title":"Microsoft QUIC Information Disclosure Vulnerability","product":"Microsoft QUIC","family":"Developer Tools","impact":"Information Disclosure","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62899","title":".NET Security Feature Bypass Vulnerability","product":".NET","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62900","title":".NET Information Disclosure Vulnerability","product":".NET","family":"Developer Tools","impact":"Information Disclosure","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62901","title":".NET Denial of Service Vulnerability","product":".NET","family":"Developer Tools","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62902","title":".NET Information Disclosure Vulnerability","product":".NET","family":"Developer Tools","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62908","title":"Windows Backup Engine Elevation of Privilege Vulnerability","product":"Windows Backup Engine","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62909","title":".NET Elevation of Privilege Vulnerability","product":".NET","family":"Developer Tools","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62910","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Elevation of Privilege","severity":"Important","cvss":7.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62911","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Elevation of Privilege","severity":"Critical","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62912","title":"Microsoft Exchange Server Denial of Service Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62913","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62914","title":"Microsoft Exchange Server Spoofing Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Spoofing","severity":"Important","cvss":7.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62915","title":"Microsoft Exchange Server Security Feature Bypass Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Security Feature Bypass","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62917","title":"Microsoft SharePoint Server Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62918","title":"Microsoft Teams Spoofing Vulnerability","product":"Microsoft Teams","family":"Microsoft Office","impact":"Spoofing","severity":"Critical","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-63508","title":"Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability","product":"Microsoft Planetary Computer Pro","family":"Device","impact":"Elevation of Privilege","severity":"Critical","cvss":10,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-63512","title":"Microsoft SharePoint Server Tampering Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Tampering","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63513","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63514","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63515","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63516","title":"Microsoft SharePoint Server Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63517","title":"Microsoft Office Graphics Component Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63518","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63519","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63520","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63521","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63522","title":"Azure SQL Database Elevation of Privilege Vulnerability","product":"Azure SQL Database","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-63524","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63525","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63526","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63527","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63528","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63529","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63530","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63531","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63532","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-63533","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64561","title":"KVM: x86: Check for invalid/obsolete root *after* making MMU pages available","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64562","title":"KVM: nVMX: Hide shadow VMCS right after VMCLEAR","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64563","title":"rhashtable: clear stale iter->p on table restart","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64564","title":"sctp: don't free the ASCONF's own transport in DEL-IP processing","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64565","title":"Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64567","title":"btrfs: reject free space cache with more entries than pages","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64569","title":"mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64571","title":"wifi: p54: validate RX frame length in p54_rx_eeprom_readback()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.2,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64572","title":"ipv4: fib: free fib_alias with kfree_rcu() on insert error path","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64573","title":"Bluetooth: qca: fix NVM tag length underflow in TLV parser","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64574","title":"wifi: mac80211: tear down new links on vif update error path","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64576","title":"nexthop: initialize extack in nh_res_bucket_migrate()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64577","title":"gtp: check skb_pull_data() return in gtp1u_send_echo_resp()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64578","title":"ksmbd: validate compound request size before reading StructureSize2","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64579","title":"xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64580","title":"xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64581","title":"xfrm: fix sk_dst_cache double-free in xfrm_user_policy()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64583","title":"usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64584","title":"usb: gadget: f_midi: cancel pending IN work before freeing the midi object","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64585","title":"can: esd_usb: kill anchored URBs before freeing netdevs","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64586","title":"wifi: brcmfmac: drain bus_reset work on device removal","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64590","title":"dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64593","title":"btrfs: do not trim a device which is not writeable","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64594","title":"usb: gadget: f_fs: initialize reset_work at allocation time","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64597","title":"smb: client: fix double-free in SMB2_close() replay","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":8.6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64598","title":"smb/client: Fix error code in smb2_aead_req_alloc()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64599","title":"crypto: amlogic - avoid double cleanup in meson_crypto_probe()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64602","title":"iio: adc: spear: Initialize completion before requesting IRQ","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64604","title":"KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":8.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64652","title":"GitHub CLI: Partial token disclosure in `gh auth status` output","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Unknown","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64653","title":"GitHub CLI: Unescaped variable components in request URLs could allow path traversal","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64654","title":"GitHub CLI: Terminal escape sequence injection in multiple `gh` commands","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64655","title":"GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64676","title":"Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-64897","title":"Microsoft SharePoint Server Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64898","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64899","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64900","title":"Microsoft SharePoint Server Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":7.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64901","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64902","title":"Microsoft SharePoint Server Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64903","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64904","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64905","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64906","title":"Microsoft Access Remote Code Execution Vulnerability","product":"Microsoft Office Access","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64907","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64908","title":"Microsoft Access Remote Code Execution Vulnerability","product":"Microsoft Office Access","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64909","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64910","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64911","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64912","title":"Microsoft Access Remote Code Execution Vulnerability","product":"Microsoft Office Access","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64914","title":"Microsoft Access Remote Code Execution Vulnerability","product":"Microsoft Office Access","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64915","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64916","title":"Microsoft SharePoint Server Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64917","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64919","title":"Microsoft Access Remote Code Execution Vulnerability","product":"Microsoft Office Access","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64920","title":"Microsoft Access Remote Code Execution Vulnerability","product":"Microsoft Office Access","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64921","title":"Microsoft SharePoint Server Elevation of Privilege Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64922","title":"Microsoft SharePoint Server Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65656","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65657","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65658","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65660","title":"Microsoft SharePoint Server Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65661","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65662","title":"Windows GDI Information Disclosure Vulnerability","product":"Windows GDI","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65663","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65664","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65665","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65667","title":"Microsoft Teams Elevation of Privilege Vulnerability","product":"Microsoft Teams","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Critical","cvss":10,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-65668","title":"Microsoft Purview eDiscovery Elevation of Privilege Vulnerability","product":"Microsoft Purview eDiscovery","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-65671","title":"Remote Access API Elevation of Privilege Vulnerability","product":"Windows Remote Access API","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65672","title":"Remote Access API Elevation of Privilege Vulnerability","product":"Windows Remote Access API","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65673","title":"Microsoft Entra Connect Elevation of Privilege Vulnerability","product":"Microsoft Entra Connect Sync","family":"Azure","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65675","title":"CoPilot Chat Security Feature Bypass Vulnerability","product":"Visual Studio Code CoPilot Chat Extension","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65678","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65679","title":"Windows iSCSI Target Service Remote Code Execution Vulnerability","product":"Windows iSCSI Target Service","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65680","title":"Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability","product":"Microsoft OneDrive","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65681","title":"Windows iSCSI Target Service Denial of Service Vulnerability","product":"Windows iSCSI Target Service","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65767","title":"Microsoft Teams for Android and iOS Spoofing Vulnerability","product":"Microsoft Teams for Android","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65768","title":"Microsoft Teams Remote Code Execution Vulnerability","product":"Microsoft Teams for Android","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65769","title":"Microsoft Teams iOS Information Disclosure Vulnerability","product":"Microsoft Teams Mobile","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65773","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65774","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65775","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65776","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65777","title":"Active Directory Security Feature Bypass Vulnerability","product":"Windows Active Directory","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":5.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65778","title":"Windows Autopilot Elevation of Privilege Vulnerability","product":"Windows Autopilot","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65779","title":"Windows Autopilot Elevation of Privilege Vulnerability","product":"Windows Autopilot","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65780","title":"Windows Autopilot Elevation of Privilege Vulnerability","product":"Windows Autopilot","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65781","title":"Windows Autopilot Elevation of Privilege Vulnerability","product":"Windows Autopilot","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65782","title":"Windows Autopilot Elevation of Privilege Vulnerability","product":"Windows Autopilot","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65783","title":"Windows Autopilot Elevation of Privilege Vulnerability","product":"Windows Autopilot","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65784","title":"Windows NTFS Information Disclosure Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65785","title":"Windows DHCP Client Denial of Service Vulnerability","product":"Windows DHCP Client","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65786","title":"Desktop Window Manager Elevation of Privilege Vulnerability","product":"Desktop Window Manager","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65787","title":"Desktop Window Manager Elevation of Privilege Vulnerability","product":"Desktop Window Manager","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65788","title":"Desktop Window Manager Elevation of Privilege Vulnerability","product":"Desktop Window Manager","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65789","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65790","title":"Windows Message Queuing Elevation of Privilege Vulnerability","product":"Windows Message Queuing","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65791","title":"Windows iSCSI Target Service Remote Code Execution Vulnerability","product":"Windows iSCSI Target Service","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65794","title":"Windows SMB Client Information Disclosure Vulnerability","product":"Windows SMB Client","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65795","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65796","title":"Windows iSCSI Target Service Denial of Service Vulnerability","product":"Windows iSCSI Target Service","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65797","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65798","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65799","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65806","title":"Azure CycleCloud Information Disclosure Vulnerability","product":"Azure CycleCloud","family":"Azure","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65807","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65810","title":".NET Framework Elevation of Privilege Vulnerability","product":".NET Framework","family":"Developer Tools","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65811","title":"Power BI Remote Code Execution Vulnerability","product":"Power BI","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65813","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Elevation of Privilege","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65814","title":"Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability","product":"Windows Storage Port Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65815","title":"Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability","product":"Microsoft Dynamics 365 (on-premises)","family":"Microsoft Dynamics","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65819","title":"gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-66301","title":"Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability","product":"Microsoft Dynamics 365 (on-premises)","family":"Microsoft Dynamics","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66484","title":"Path Traversal in GNU cpio","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"CERT-PL","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-66485","title":"Uncontrolled Memory Allocation in GNU cpio","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"CERT-PL","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-66486","title":"Improper Output Encoding in GNU cpio","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"CERT-PL","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-66799","title":"Windows Key Guard Elevation of Privilege Vulnerability","product":"Windows Key Guard","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66802","title":"Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability","product":"Microsoft Azure Attestation service and Device Health Attestation Service","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66804","title":"Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability","product":"Windows Cross Device Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66805","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66806","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66807","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66808","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66809","title":"Microsoft Office Graphics Component Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66810","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-6726","title":"MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse","product":"Windows TPM","family":"Windows","impact":"Spoofing","severity":"Important","cvss":7.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"MITRE","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-6727","title":"MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability","product":"Windows TPM","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"MITRE","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-67319","title":"axios before 0.33.0 Prototype Pollution via nested option objects","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"VulnCheck","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68081","title":"KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68082","title":"libceph: fix two unsafe bare decodes in decode_lockers()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68083","title":"ksmbd: fix path resolution in ksmbd_vfs_kern_path_create","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68084","title":"staging: vme_user: fix location monitor leak in tsi148 bridge","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68085","title":"Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68086","title":"mm/khugepaged: write all dirty file folios when collapsing","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68088","title":"usb: gadget: function: rndis: add length check to response query","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68090","title":"debugobjects: Plug race against a concurrent OOM disable","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68091","title":"HID: wacom: stop hardware after post-start probe failures","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68093","title":"KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68096","title":"audit: fix recursive locking deadlock in audit_dupe_exe()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68097","title":"ksmbd: validate ACE size against SID sub-authorities","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68098","title":"ksmbd: bound DACL dedup walk to copied ACEs","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68099","title":"ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68100","title":"ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68102","title":"drm/amdgpu: fix aperture mapping leak","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68103","title":"drm/amdgpu: reject mapping a reserved doorbell to a new queue","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68104","title":"drm/amdgpu: invoke pm_genpd_remove() before freeing genpd","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68105","title":"drm/amdgpu: Fix kernel panic during driver load failure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68106","title":"drm/amdgpu: fix division by zero with invalid uvd dimensions","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68107","title":"drm/amdgpu/vcn4: avoid rereading IB param length","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68108","title":"drm/amdgpu/vce: fix integer overflow in image size","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68109","title":"drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68110","title":"drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68111","title":"drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68112","title":"drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68113","title":"drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68114","title":"drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68115","title":"drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68116","title":"vxlan: mdb: Fix source list corruption on a failed replace","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68117","title":"tipc: clear sock->sk on the failed-insert path in tipc_sk_create()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68118","title":"tcp: challenge ACK for non-exact RST in SYN-RECEIVED","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68121","title":"pppoe: reload header pointer after dev_hard_header()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68123","title":"openvswitch: fix GSO userspace truncation underflow","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68124","title":"mctp: serial: handle zero-length frames to prevent rx buffer overflow","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68125","title":"mac802154: llsec: reject frames shorter than the authentication tag","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68126","title":"mac802154: hold an interface reference across the scan worker","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68127","title":"ila: reload IPv6 header after pskb_may_pull in checksum adjust","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68129","title":"gve: fix Rx queue stall on alloc failure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68130","title":"ksmbd: defer destroy_previous_session() until after NTLM authentication","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68131","title":"rbd: Reset positive result codes to zero in object map update path","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68132","title":"super: fix emergency thaw deadlock on frozen block devices","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68135","title":"net: hip04: fix RX buffer leak on build_skb failure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68136","title":"net: gro: fix double aggregation of flush-marked skbs","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68137","title":"net/x25: fix use-after-free in x25_kill_by_neigh()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68138","title":"net/sched: serialize qdisc_rtab_list against concurrent get/put","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68140","title":"net/iucv: fix use-after-free of a severed iucv_path","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68141","title":"net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68142","title":"geneve: require CAP_NET_ADMIN in the device netns for changelink","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68143","title":"net: slip: serialize receive against buffer reallocation","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68144","title":"phonet: pep: fix use-after-free in pep_get_sb()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68145","title":"iomap: fix out-of-bounds bitmap_set() with zero-length range","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68146","title":"ftrace: Add global mutex to serialize trace_parser access","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68147","title":"fscrypt: Avoid dynamic allocation in fscrypt_get_devices()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68148","title":"fscrypt: Add missing superblock check in find_or_insert_direct_key()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68149","title":"fs: preserve ACL_DONT_CACHE state in forget_cached_acl()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68151","title":"binfmt_elf_fdpic: only honour the first PT_INTERP","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68152","title":"amt: fix use-after-free in AMT delayed works","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68153","title":"libceph: remove debugfs files before client teardown","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68154","title":"libceph: reject zero bucket types in crush_decode","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68155","title":"libceph: Reject monmaps advertising zero monitors","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68156","title":"libceph: refresh auth->authorizer_buf{,_len} after authorizer update","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68157","title":"libceph: guard missing CRUSH type name lookup","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68158","title":"libceph: Fix multiplication overflow in decode_new_up_state_weight()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68159","title":"libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68160","title":"ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68161","title":"sctp: close UDP tunnel sockets during netns teardown","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68162","title":"sctp: avoid auth_enable sysctl UAF during netns teardown","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68164","title":"mm/damon/core: disallow overlapping input ranges for damon_set_regions()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68165","title":"mm/damon/core: validate ranges in damon_set_regions()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68166","title":"userfaultfd: prevent registration of special VMAs","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68169","title":"mptcp: pm: userspace: fix use-after-free in get_local_id","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68171","title":"arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":1.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68175","title":"tracing: Fix resource leak on mmiotrace trace_pipe close","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68176","title":"tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68180","title":"intel_th: fix MSC output device reference leak","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68181","title":"mei: bus: access mei_device under device_lock on cleanup","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68182","title":"comedi: comedi_parport: deal with premature interrupt","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68183","title":"firmware: stratix10-svc: fix memory leaks and list corruption bugs","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68184","title":"cdrom: fix stack out-of-bounds read in CDROMVOLCTRL","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68185","title":"LoongArch: Move jump_label_init() before parse_early_param()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68186","title":"binfmt_misc: set have_execfd only once the interpreter is opened","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68187","title":"exec: fix unsigned loop counter wrap in transfer_args_to_stack()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68188","title":"Bluetooth: RFCOMM: Fix session UAF in set_termios","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68189","title":"Bluetooth: hci_sync: Protect UUID list traversal","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68190","title":"staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68192","title":"wifi: brcmfmac: make release_scratchbuffers idempotent","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68194","title":"wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68195","title":"wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68196","title":"wifi: wilc1000: validate assoc response length before subtracting header","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68197","title":"wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68198","title":"wifi: ath6kl: fix use-after-free in aggr_reset_state()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68199","title":"wifi: ath6kl: fix OOB access from firmware ADDBA window size","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68202","title":"ALSA: seq: close a re-opened queue timer in the destructor","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68203","title":"media: vivid: fix cleanup bugs in vivid_init()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68204","title":"media: vivid: check for vb2_is_busy() when toggling caps","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68205","title":"media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68206","title":"media: v4l2-ctrls: validate HEVC active reference counts","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68207","title":"media: ti: vpe: unwind v4l2 device registration on probe error","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68209","title":"media: sun4i-csi: Return queued buffers on start_streaming() failure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68210","title":"media: stm32: dcmi: unregister notifier on probe failure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68212","title":"media: saa7134: Fix a possible memory leak in saa7134_video_init1","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68214","title":"media: rtl2832: fix use-after-free in rtl2832_remove()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68215","title":"media: radio-si476x: Unregister v4l2_device on probe failure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68216","title":"media: pwc: Return queued buffers on start_streaming() failure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68217","title":"media: pwc: Drain fill_buf on start_streaming() failure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68218","title":"media: pci: dm1105: Free allocated workqueue","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68219","title":"media: nxp: imx8-isi: Fix potential out-of-bounds issues","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68220","title":"media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68222","title":"media: msi2500: Return queued buffers on start_streaming() failure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68223","title":"media: meson: vdec: Fix memory leak in error path of vdec_open","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68226","title":"media: cx23885: add ioremap return check and cleanup","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68229","title":"media: cedrus: skip invalid H.264 reference list entries","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68231","title":"media: airspy: Return queued buffers on start_streaming() failure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68233","title":"drm/vc4: Shut down BO cache timer before teardown","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68234","title":"drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68235","title":"drm/amd/display: dce100: skip non-DP stream encoders for DP MST","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68236","title":"drm/amd/display: set new_stream to NULL after release","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68238","title":"drm/amdgpu: Release VFCT ACPI table reference","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68241","title":"drm/i915/mst: limit DP MST ESI service loop","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68242","title":"drm/i915/gt: Fix NULL deref on sched_engine alloc failure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68243","title":"drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68244","title":"drm/i915/gem: Do not leak siblings[] on proto context error","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68245","title":"drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68246","title":"drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68247","title":"drm/i915/bios: range check LFP Data Block panel_type2","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68248","title":"drm/i915: Return NULL on error in active_instance","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68249","title":"drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68250","title":"drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68251","title":"drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68252","title":"drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68253","title":"drm/i915/hdcp: check streams[] bounds before overflow","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68254","title":"drm/i915/vrr: require valid min/max vfreq for VRR","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68255","title":"drm/virtio: bound EDID block reads to the response buffer","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68256","title":"drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68257","title":"drm/amdkfd: fix 32-bit overflow in CWSR total size calculation","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68258","title":"drm/amdkfd: Check bounds on CRIU restore queue type and mqd size","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68259","title":"drm/amdkfd: Check bounds in allocate_event_notification_slot","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68269","title":"drm/i915/gem: Add missing nospec on parallel submit slot","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68271","title":"drm/nouveau: fix reversed error cleanup order in ucopy functions","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68272","title":"drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68273","title":"drm/amdgpu: Fix context pstate override handling","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68277","title":"drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68278","title":"drm/dp/mst: fix buffer overflows in sideband chunk accumulation","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68279","title":"drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68280","title":"drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68284","title":"bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68286","title":"drop_monitor: perform u64_stats updates under IRQ-disabled section","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68287","title":"drop_monitor: fix size calculations for 64-bit attributes","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68288","title":"net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68289","title":"tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68293","title":"net/mlx5: Fix MCIA register buffer overflow on 32 dword reads","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68294","title":"net: qrtr: restrict socket creation to the initial network namespace","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68297","title":"tipc: fix u16 MTU truncation in media and bearer MTU validation","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68299","title":"vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68300","title":"sctp: auth: verify auth requirement when auth_chunk is NULL","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68301","title":"net: hsr: fix memory leak on slave unregistration by removing synced VLANs","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68302","title":"amt: re-read skb header pointers after every pull","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68303","title":"drm/vc4: hvs/v3d: Fix null dereference in unbind","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68304","title":"wifi: brcmfmac: fix 802.1X-SHA256 call trace warning","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68306","title":"wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68308","title":"wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68309","title":"wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68310","title":"wifi: mt76: mt7915: guard HE capability lookups","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68312","title":"cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68313","title":"tipc: fix infinite loop in __tipc_nl_compat_dumpit","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68315","title":"sctp: validate stream count in sctp_process_strreset_inreq()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68317","title":"pds_core: fix auxiliary device add/del races","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68318","title":"pds_core: fix use-after-free on workqueue during remove","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68320","title":"sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68322","title":"rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68323","title":"tipc: serialize udp bearer replicast list updates","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68324","title":"iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68325","title":"iommu/amd: Bound the early ACPI HID map","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68326","title":"wifi: mwifiex: bound uAP association event IEs to the event buffer","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68327","title":"wan: wanxl: Only reset hardware after BAR mapping","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68328","title":"nfp: Check resource mutex allocation","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68329","title":"iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68331","title":"dpaa2-eth: put MAC endpoint device on disconnect","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68333","title":"dpaa2-switch: put MAC endpoint device on disconnect","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68335","title":"rds: drop incoming messages that cross network namespace boundaries","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68336","title":"bonding: fix devconf_all NULL dereference when IPv6 is disabled","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68337","title":"bpf: Reject redirect helpers without a bpf_net_context","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68338","title":"net/packet: avoid fanout hook re-registration after unregister","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68339","title":"Bluetooth: btusb: validate Realtek vendor event length","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68340","title":"hwmon: occ: validate poll response sensor blocks","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68343","title":"smb: client: validate DFS referral PathConsumed","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68348","title":"ASoC: tas2781: bound firmware description string parsing","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68349","title":"wifi: carl9170: fix buffer overflow in rx_stream failover path","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68350","title":"wifi: carl9170: fix OOB read from off-by-two in TX status handler","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68351","title":"wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68352","title":"wifi: ath6kl: fix OOB read from firmware IE lengths in connect event","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68353","title":"wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68354","title":"firewire: net: Fix fragmented datagram reassembly","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68355","title":"wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68357","title":"watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68359","title":"hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68360","title":"hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68361","title":"hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68362","title":"wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68363","title":"wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68364","title":"drm/amd/display: Fix ISM dc_lock deadlock during suspend","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68365","title":"USB: serial: io_edgeport: cap received transmit credits","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68366","title":"usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68367","title":"usb: gadget: f_tcm: synchronize delayed set_alt with teardown","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68368","title":"usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68369","title":"usb: gadget: printer: fix infinite loop in printer_read()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68370","title":"usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68371","title":"usb: musb: omap2430: Do not put borrowed of_node in probe","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68373","title":"wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68374","title":"usb: core: sysfs: add lock to bos_descriptors_read()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68376","title":"sctp: fix auth_hmacs array size in struct sctp_cookie","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68377","title":"net/sched: act_tunnel_key: Defer dst_release to RCU callback","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68381","title":"ksmbd: pin conn during async oplock break notification","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68386","title":"bpf, sockmap: Reject unhashed UDP sockets on sockmap update","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68388","title":"smb/client: handle overlapping allocated ranges in fallocate","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68389","title":"Bluetooth: hci_qca: Clear memdump state on invalid dump size","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68391","title":"Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68392","title":"Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68395","title":"ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68396","title":"scsi: core: wake eh reliably when using scsi_schedule_eh","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68397","title":"net/iucv: take a reference on the socket found in afiucv_hs_rcv()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68398","title":"ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68399","title":"bpf: Fix UAF in sock clone early bailouts","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68401","title":"firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68402","title":"wifi: cfg80211: bound element ID read when checking non-inheritance","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68403","title":"wifi: brcmfmac: initialize SDIO data work before cleanup","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68404","title":"wifi: cfg80211: use wiphy work for socket owner autodisconnect","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68405","title":"wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68406","title":"wifi: cfg80211: validate PMSR FTM preamble range","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68407","title":"wifi: nl80211: free RNR data on MBSSID mismatch","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68408","title":"wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68409","title":"wifi: mac80211: defer link RX stats percpu free to RCU","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68410","title":"wifi: libertas: fix memory leak in helper_firmware_cb()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68411","title":"wifi: mac80211_hwsim: clamp virtio RX length before skb_put","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68412","title":"wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68413","title":"wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68414","title":"wifi: cfg80211: cancel sched scan results work on unregister","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68416","title":"mtd: fix double free and WARN_ON in add_mtd_device() error paths","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68417","title":"RDMA/siw: publish QP after initialization","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68418","title":"RDMA/irdma: Prevent user-triggered null deref on QP create","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68419","title":"RDMA/irdma: Prevent rereg_mr for non-mem regions","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68422","title":"btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68425","title":"IB/mad: Drop unmatched RMPP responses before reassembly","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68426","title":"xfrm: fix stale skb->prev after async crypto steals a GSO segment","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68427","title":"gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68428","title":"KVM: x86/mmu: Fix use-after-free on vendor module reload","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68480","title":"x86/bugs: Make Safe-RET robust against interrupt injection","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-68792","title":"Microsoft Office Elevation of Privilege Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68793","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68794","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68795","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68796","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68797","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68798","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68799","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68800","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68801","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68802","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68803","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68804","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68805","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68806","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68807","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68808","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68809","title":"Powerpoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68810","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68811","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68812","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68813","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68814","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68815","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68816","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68817","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68819","title":"Windows Network File System Denial of Service Vulnerability","product":"Windows Network File System","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68820","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","product":"Windows Ancillary Function Driver for WinSock","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":true,"publiclyDisclosed":false,"exploitability":"Exploitation Detected","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68821","title":"Windows Package Manager Elevation of Privilege Vulnerability","product":"Windows Package Manager","family":"Apps","impact":"Elevation of Privilege","severity":"Important","cvss":7.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68823","title":"Azure Confidential Ledger Remote Code Execution Vulnerability","product":"Azure Confidential Ledger","family":"Azure","impact":"Remote Code Execution","severity":"Critical","cvss":9.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-69152","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-69153","title":"PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-69248","title":"python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-69249","title":"python-cryptography: Duplicate self-signed intermediates can cause exponential path-building","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-69278","title":"Visual Studio Code Security Feature Bypass Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69306","title":"Visual Studio Code Security Feature Bypass Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69320","title":"Visual Studio Code Remote Code Execution Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70130","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":8.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70304","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70306","title":"Microsoft Office SharePoint Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":9.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70307","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","product":"Windows Ancillary Function Driver for WinSock","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70310","title":"Microsoft Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70311","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70312","title":"Powerpoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70313","title":"Microsoft PowerPoint Remote Code Execution Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70314","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70315","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70316","title":"Powerpoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70317","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70318","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70319","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70320","title":"Powerpoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70321","title":"Microsoft SharePoint Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70322","title":"Powerpoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70323","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70324","title":"Microsoft SharePoint Elevation of Privilege Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70325","title":"Powerpoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70326","title":"Microsoft SharePoint Server Elevation of Privilege Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70327","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70328","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70329","title":"Microsoft Outlook Remote Code Execution Vulnerability","product":"Microsoft Office Outlook","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70330","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70332","title":"Microsoft Office SharePoint Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Critical","cvss":9.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-70335","title":"GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability","product":"GitHub Copilot and Visual Studio Code","family":"Developer Tools","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70336","title":"Visual Studio Code Remote Code Execution Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70337","title":"Microsoft PowerShell Remote Code Execution Vulnerability","product":"Microsoft PowerShell Core","family":"Developer Tools","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70338","title":"Microsoft PowerShell Security Feature Bypass Vulnerability","product":"Microsoft PowerShell","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70339","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Remote Code Execution","severity":"Important","cvss":5.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70340","title":"Azure CycleCloud Elevation of Privilege Vulnerability","product":"Azure CycleCloud","family":"Azure","impact":"Elevation of Privilege","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70344","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70345","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70346","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70347","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70348","title":"Windows Management Services Denial of Service Vulnerability","product":"Windows Management Services","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70354","title":".NET Core Remote Code Execution Vulnerability","product":".NET","family":"Developer Tools","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70355","title":"Microsoft SharePoint Server Elevation of Privilege Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Important","cvss":7.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70367","title":"Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-70368","title":"Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-71225","title":"Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-71226","title":"Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-71227","title":"Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-71331","title":"Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability","product":"Microsoft Azure Attestation service and Device Health Attestation Service","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71497","title":"jsoup: Cleaner may expose markup with custom raw-text elements","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-71556","title":"go-git: Worktree operations may follow symlinks","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-71557","title":"go-git: Malicious reference names may modify files outside the reference storage","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-72522","title":"libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":6.2,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-72568","title":"Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"TuranSec","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-72971","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability","product":"Windows Container Isolation FS Filter Driver (unionfs.sys)","family":"Windows","impact":"Tampering","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":true,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true}]}