{"release":"2026-Sep","releaseDate":"2026-09-08","source":"https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Sep","sourceHuman":"https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep","note":"Built from Microsoft's CVRF document for this release, not from the Security Update Guide's thirty-day view, which mixes in the previous month's tail. Severity, impact, CVSS, assigning authority and exploitation status are Microsoft's own classification, carried through unchanged.","licence":"Facts, not copyrightable. Reuse freely; a link back is appreciated.","counts":{"total":973,"totalWithThirdParty":1170,"thirdParty":197,"exploited":2,"publiclyDisclosed":0,"requiringCustomerAction":964,"noCustomerActionRequired":9,"bySeverity":{"Important":860,"Critical":113},"byImpact":{"Remote Code Execution":258,"Elevation of Privilege":438,"Information Disclosure":173,"Denial of Service":56,"Spoofing":16,"Security Feature Bypass":19,"Tampering":13}},"items":[{"cve":"CVE-2025-70873","title":"An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.","product":"Mariner","family":"Developer Tools","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-0799","title":"OOBR and OOBW in libpcap before 1.10.7","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":8.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Tcpdump","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-13608","title":"OpenLDAP SASL authentication bypass","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":3.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"curl","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-14957","title":"FIPS mode assertion failure via malicious CERT payload","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"libreswan","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-18238","title":"OOBR in rpcap client in libpcap before 1.10.7","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Tcpdump","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-18313","title":"rpcapd memory leak in libpcap before 1.10.7","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Tcpdump","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-18329","title":"NGINX ngx_http_js_module vulnerability","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"f5","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-18743","title":"Popt-devel: popt-static: short realloc in poptconfigfiletostring","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-18924","title":"HTTP/2 server push UAF","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"curl","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-19931","title":"Negotiate ambient user conn reuse","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"curl","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-31911","title":"abort() in libpcap before 1.10.7 on an invalid BPF opcode","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Tcpdump","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-31912","title":"OOBR in libpcap before 1.10.7","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Tcpdump","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-33630","title":"c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-34182","title":"CMS AuthEnvelopedData Processing May Accept Forged Messages","product":"Mariner","family":"Developer Tools","impact":"Unknown","severity":"Critical","cvss":9.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"openssl","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-47297","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-50349","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","product":"Windows Ancillary Function Driver for WinSock","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-55007","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-55951","title":"httpc memory exhaustion via unbounded response header accumulation","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-56143","title":"Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":4.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"elastic","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-56172","title":"Windows VHD miniport driver Elevation of Privilege Vulnerability","product":"Windows VHD miniport driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-56177","title":"Windows Server Elevation of Privilege Vulnerability","product":"Windows Server","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-56198","title":"Microsoft Trace Data Helper Elevation of Privilege Vulnerability","product":"Microsoft Trace Data Helper","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-56855","title":"Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Go","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-57098","title":"Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability","product":"Windows RDP Client","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-57099","title":"ASP.NET Core Denial of Service Vulnerability","product":"ASP.NET Core","family":"Developer Tools","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-58599","title":"HEVC Video Extensions Remote Code Execution Vulnerability","product":"Microsoft Windows Codecs Library","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-58600","title":"HEVC Video Extensions Elevation of Privilege Vulnerability","product":"Microsoft Windows Codecs Library","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-58611","title":"Xbox Gaming Services Elevation of Privilege Vulnerability","product":"XBox Gaming Services","family":"Apps","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-58649","title":".NET Information Disclosure Vulnerability","product":".NET","family":"Developer Tools","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-59696","title":"uri_string does not bound the port component of a URI before integer conversion","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-6244","title":"division by zero in libpcap before 1.10.7","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Tcpdump","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-62694","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62697","title":"Windows Push Notifications Elevation of Privilege Vulnerability","product":"Windows Push Notifications","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62706","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","product":"Microsoft Windows Media Foundation","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62744","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","product":"Microsoft Windows Media Foundation","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62759","title":"Windows Netlogon Spoofing Vulnerability","product":"Windows Netlogon","family":"Windows","impact":"Spoofing","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62762","title":"Windows Active Directory Domain Services Denial of Service Vulnerability","product":"Active Directory Domain Services","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62801","title":"Microsoft PowerShell Security Feature Bypass Vulnerability","product":"Windows PowerShell","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62804","title":"Microsoft Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62810","title":"Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability","product":"Active Directory Certificate Services (AD CS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62813","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","product":"Active Directory Domain Services","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62895","title":"Azure Arc SQL Server Extension Elevation of Privilege Vulnerability","product":"Azure Arc","family":"Azure","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-62906","title":"Microsoft Discovery Studio Information Disclosure Vulnerability","product":"Microsoft Discovery Studio","family":"Azure","impact":"Information Disclosure","severity":"Critical","cvss":7.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-62916","title":"Microsoft Entra ID Elevation of Privilege Vulnerability","product":"Microsoft Entra ID","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":9.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-63523","title":"Skype for Business Spoofing Vulnerability","product":"Skype for Business","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-64918","title":"Microsoft Office Spoofing Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-6554","title":"infinte loop in libpcap before 1.10.7","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Tcpdump","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-65669","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":9.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65772","title":"Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability","product":"Microsoft Dynamics 365","family":"Microsoft Dynamics","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65812","title":"Microsoft Teams for Android Information Disclosure Vulnerability","product":"Microsoft Teams for Android","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-65818","title":"Power Automate Elevation of Privilege Vulnerability","product":"Power Automate","family":"Microsoft Dynamics","impact":"Elevation of Privilege","severity":"Critical","cvss":8.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-66302","title":"Skype for Business Remote Code Execution Vulnerability","product":"Skype for Business","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66303","title":"Skype for Business and Lync Denial of Service Vulnerability","product":"Skype for Business","family":"Microsoft Office","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66304","title":"Skype for Business Information Disclosure Vulnerability","product":"Skype for Business","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66305","title":"Skype for Business Spoofing Vulnerability","product":"Skype for Business","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66306","title":"Skype for Business Information Disclosure Vulnerability","product":"Skype for Business","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66307","title":"Skype for Business and Lync Denial of Service Vulnerability","product":"Skype for Business","family":"Microsoft Office","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66308","title":"Skype for Business and Lync Denial of Service Vulnerability","product":"Skype for Business","family":"Microsoft Office","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66357","title":"inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-66814","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66816","title":"Microsoft SQL Server Security Feature Bypass Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Security Feature Bypass","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66818","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66819","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66820","title":"SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-66835","title":"httpd mod_auth directory protection bypassed by a doubled slash in the request path","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-67368","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67369","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67370","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67373","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67376","title":"Microsoft SQL Server Denial of Service Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67378","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Critical","cvss":8.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67379","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67380","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67381","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67383","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67384","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67385","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67386","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67388","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67389","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67390","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67393","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67624","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67629","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67630","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67631","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67633","title":"Microsoft SQL Server Denial of Service Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67636","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Critical","cvss":8.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67638","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67639","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67641","title":"Microsoft SQL Server Denial of Service Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67642","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67643","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67645","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-67648","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68775","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68776","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68777","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68778","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68779","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68780","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68781","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68784","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68785","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":4.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68786","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68787","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68824","title":"Connected User Experiences and Telemetry Elevation of Privilege Vulnerability","product":"Windows Connected User Experiences and Telemetry","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68825","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","product":"Windows Bind Filter Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68827","title":"Windows GDI+ Elevation of Privilege Vulnerability","product":"Windows GDI+","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68828","title":"Remote Desktop Client Remote Code Execution Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68830","title":"Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability","product":"Windows Universal Plug and Play (UPnP) Device Host","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68831","title":"Windows Defender Firewall Service Information Disclosure Vulnerability","product":"Windows Defender Firewall Service","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68832","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68833","title":"Windows NTFS Remote Code Execution Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68834","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68835","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68837","title":"Windows File History Service Elevation of Privilege Vulnerability","product":"Windows File History Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68838","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68839","title":"Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability","product":"Windows USB Mass Storage Class Driver","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68840","title":"Windows USB Driver Elevation of Privilege Vulnerability","product":"Windows USB Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68841","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68842","title":"Windows MIDI Service Module Information Disclosure Vulnerability","product":"Windows MIDI Service Module","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68843","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68844","title":"Windows Storage Spaces Controller Remote Code Execution Vulnerability","product":"Windows Storage Spaces Controller","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68845","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","product":"Windows Program Compatibility Assistant Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68846","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68847","title":"Connected User Experiences and Telemetry Elevation of Privilege Vulnerability","product":"Windows Connected User Experiences and Telemetry","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68848","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68849","title":"Windows Bluetooth Port Driver Information Disclosure Vulnerability","product":"Windows Bluetooth Port Driver","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68850","title":"Microsoft Account Elevation of Privilege Vulnerability","product":"Microsoft Account","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68851","title":"Windows NTFS Information Disclosure Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68852","title":"Microsoft Account Information Disclosure Vulnerability","product":"Microsoft Account","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68873","title":"Windows Program Compatibility Assistant Service Information Disclosure Vulnerability","product":"Windows Program Compatibility Assistant Service","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68874","title":"Windows Program Compatibility Assistant Service Information Disclosure Vulnerability","product":"Windows Program Compatibility Assistant Service","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68875","title":"Windows NTFS Remote Code Execution Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68876","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","product":"Windows Program Compatibility Assistant Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68877","title":"Windows Storage Spaces Controller Remote Code Execution Vulnerability","product":"Windows Storage Spaces Controller","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68878","title":"Windows Fast FAT Driver Elevation of Privilege Vulnerability","product":"Windows Fast FAT Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68880","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68881","title":"Microsoft Standard XPS Information Disclosure Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68884","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68885","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68886","title":"Windows Network Connection Broker Information Disclosure Vulnerability","product":"Windows Network Connection Broker","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68887","title":"Windows Message Queuing Queue Manager Denial of Service Vulnerability","product":"Windows Message Queuing Queue Manager","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68888","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68889","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68890","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68891","title":"Microsoft Standard XPS Information Disclosure Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68892","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68893","title":"Remote Desktop Licensing Service Elevation of Privilege Vulnerability","product":"Windows Remote Desktop Licensing Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68894","title":"Windows Error Reporting Elevation of Privilege Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68895","title":"Internet Storage Name Service Information Disclosure Vulnerability","product":"Internet Storage Name Service","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68896","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68897","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-68898","title":"Windows iSCSI Denial of Service Vulnerability","product":"Windows iSCSI","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69265","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69266","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69267","title":"Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability","product":"Windows Connected User Experiences and Telemetry","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69268","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69269","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69270","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","product":"Windows USB Audio Class driver (usbaudio.sys)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69271","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69272","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69273","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69274","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69275","title":"Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability","product":"Kernel Streaming WOW Thunk Service Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69276","title":"Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability","product":"Microsoft UxTheme Library (uxtheme.dll)","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69277","title":"Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability","product":"Microsoft Local Security Authority Server (lsasrv)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69279","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","product":"Windows Cloud Files Mini Filter Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69280","title":"Windows Push Notifications Elevation of Privilege Vulnerability","product":"Windows Push Notifications","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69281","title":"Windows License Manager Elevation of Privilege Vulnerability","product":"Windows License Manager","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69282","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69283","title":"Windows CD-ROM Driver Elevation of Privilege Vulnerability","product":"Windows CD-ROM Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69284","title":"Windows DCOM Server Elevation of Privilege Vulnerability","product":"Windows DCOM Server","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69285","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69286","title":"Windows USB Audio Class Driver Information Disclosure Vulnerability","product":"Windows USB Audio Class driver (usbaudio.sys)","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69287","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69288","title":"Windows GDI+ Information Disclosure Vulnerability","product":"Windows GDI+","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69289","title":"Windows Setup Files Cleanup Elevation of Privilege Vulnerability","product":"Windows Setup Files Cleanup","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69290","title":"Windows Storage Spaces Controller Elevation of Privilege Vulnerability","product":"Windows Storage Spaces Controller","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69291","title":"Windows Volume Manager Extension Driver Remote Code Execution Vulnerability","product":"Windows Volume Manager Extension Driver","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69292","title":"Remote Desktop Gateway Service Elevation of Privilege Vulnerability","product":"Remote Desktop Gateway Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69293","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69294","title":"Microsoft COM for Windows Information Disclosure Vulnerability","product":"Microsoft COM for Windows","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69295","title":"Windows USB Driver Elevation of Privilege Vulnerability","product":"Windows USB Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69296","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69297","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69298","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69299","title":"Microsoft COM for Windows Elevation of Privilege Vulnerability","product":"Microsoft COM for Windows","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69300","title":"Windows Push Notifications Elevation of Privilege Vulnerability","product":"Windows Push Notifications","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69301","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69303","title":"Push Message Routing Service Information Disclosure Vulnerability","product":"Push Message Routing Service","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69304","title":"ASP.NET Core Denial of Service Vulnerability","product":"ASP.NET Core","family":"Developer Tools","impact":"Denial of Service","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69305","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69307","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","product":"Windows USB Audio Class driver (usbaudio.sys)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69308","title":"Microsoft Standard XPS Information Disclosure Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69309","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69310","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69311","title":"Windows Audio Service Elevation of Privilege Vulnerability","product":"Windows Audio Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69312","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69313","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69314","title":"Windows Device Association Broker Service Elevation of Privilege Vulnerability","product":"Windows Device Association Broker service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69315","title":"Windows License Manager Information Disclosure Vulnerability","product":"Windows License Manager","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69316","title":"Windows Overlay Filter Information Disclosure Vulnerability","product":"Windows Overlay Filter","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69317","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69318","title":"Windows Imaging Component Information Disclosure Vulnerability","product":"Windows Imaging Component","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69319","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","product":"Windows USB Video Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69321","title":"Windows Power Dependency Coordinator Tampering Vulnerability","product":"Windows Power Dependency Coordinator","family":"Windows","impact":"Tampering","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69322","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69323","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69324","title":"Windows Performance Monitor Elevation of Privilege Vulnerability","product":"Windows Performance Monitor","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69325","title":"Microsoft JScript Remote Code Execution Vulnerability","product":"Microsoft JScript","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69328","title":"Windows Storage Elevation of Privilege Vulnerability","product":"Windows Storage","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69329","title":"BranchCache Denial of Service Vulnerability","product":"BranchCache","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69331","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","product":"Windows Remote Access Connection Manager","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69332","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69333","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69334","title":"Windows Volume Manager Extension Driver Remote Code Execution Vulnerability","product":"Windows Volume Manager Extension Driver","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69335","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69336","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69337","title":"Windows Registry Elevation of Privilege Vulnerability","product":"Windows Registry","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69338","title":"Remote Desktop Gateway Service Elevation of Privilege Vulnerability","product":"Remote Desktop Gateway Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69339","title":"Windows MIDI Service Module Information Disclosure Vulnerability","product":"Windows MIDI Service Module","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69340","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69341","title":"Windows Image Acquisition Elevation of Privilege Vulnerability","product":"Windows Image Acquisition","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69342","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69343","title":"Windows Overlay Filter Information Disclosure Vulnerability","product":"Windows Overlay Filter","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69344","title":"Windows Print Spooler Components Information Disclosure Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69345","title":"Microsoft Standard XPS Information Disclosure Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69346","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69347","title":"Windows Fast FAT Driver Remote Code Execution Vulnerability","product":"Windows Fast FAT Driver","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69348","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69349","title":"Windows Management Instrumentation Information Disclosure Vulnerability","product":"Windows Management Instrumentation","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69350","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","product":"Windows Overlay Filter","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69351","title":"Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability","product":"Windows Universal Plug and Play (UPnP) Device Host","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69352","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69353","title":"Windows Text Shaping Information Disclosure Vulnerability","product":"Windows Text Shaping","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69355","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69356","title":"Microsoft Exchange Server Spoofing Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Spoofing","severity":"Important","cvss":9.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69357","title":"Windows NDIS Elevation of Privilege Vulnerability","product":"Windows NDIS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69358","title":"Remote Desktop Client Remote Code Execution Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69359","title":"Active Directory Domain Services Elevation of Privilege Vulnerability","product":"Active Directory Domain Services","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69360","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69361","title":"Microsoft Exchange Server Spoofing Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Spoofing","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69362","title":"Windows Error Reporting Elevation of Privilege Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69364","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69365","title":"Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability","product":"Microsoft Local Security Authority Server (lsasrv)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69366","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69367","title":"Microsoft Standard XPS Information Disclosure Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69368","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","product":"Windows Overlay Filter","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69369","title":"Windows DNS Information Disclosure Vulnerability","product":"Windows DNS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69371","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","product":"Windows Overlay Filter","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69372","title":"Windows Network File System Denial of Service Vulnerability","product":"Windows Network File System","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69373","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","product":"Windows Overlay Filter","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69374","title":"Windows SMB Server Denial of Service Vulnerability","product":"Windows SMB Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69375","title":"Microsoft Exchange Server Tampering Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Tampering","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69376","title":"Microsoft Standard XPS Information Disclosure Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69377","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","product":"Windows Modern Device Management (MDM)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69378","title":"Microsoft Exchange Server Denial of Service Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69379","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69380","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Elevation of Privilege","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69381","title":"Windows Storage Port Driver Information Disclosure Vulnerability","product":"Windows Storage Port Driver","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69382","title":"Microsoft Exchange Server Information Disclosure Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Information Disclosure","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69383","title":"Windows Shell Elevation of Privilege Vulnerability","product":"Windows Shell","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69384","title":"Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability","product":"Virtual Hard Disk (VHD) Miniport Driver","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69385","title":"Windows TCP/IP Elevation of Privilege Vulnerability","product":"Windows TCP/IP","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69386","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","product":"Microsoft Windows Media Foundation","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69388","title":"Windows Bluetooth Service Elevation of Privilege Vulnerability","product":"Windows Bluetooth Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69389","title":"Windows Storage Management Provider Elevation of Privilege Vulnerability","product":"Windows Storage Management Provider","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69390","title":"Windows Spaceport.sys Information Disclosure Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69391","title":"Windows Broker Infrastructure Service Elevation of Privilege Vulnerability","product":"Windows Broker Infrastructure Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69392","title":"Windows Shell Elevation of Privilege Vulnerability","product":"Windows Shell","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69393","title":"Windows Spaceport.sys Information Disclosure Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69394","title":"Windows Audio Service Elevation of Privilege Vulnerability","product":"Windows Audio Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69395","title":"Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability","product":"Active Directory Certificate Services (AD CS)","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69396","title":"Windows NDIS Elevation of Privilege Vulnerability","product":"Windows NDIS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69397","title":"Microsoft OpenSSH for Windows Remote Code Execution Vulnerability","product":"OpenSSH for Windows","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69398","title":"Windows Bluetooth Service Elevation of Privilege Vulnerability","product":"Windows Bluetooth Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69401","title":"Audio Video Control Transport Protocol Elevation of Privilege Vulnerability","product":"Audio Video Control Transport Protocol","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69402","title":"Microsoft Office SharePoint Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":7.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69403","title":"Windows SMB Server Information Disclosure Vulnerability","product":"Windows SMB Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69404","title":"Windows TCP/IP Elevation of Privilege Vulnerability","product":"Windows TCP/IP","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69405","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69406","title":"Windows Kernel Information Disclosure Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69407","title":"Volume Manager Driver Elevation of Privilege Vulnerability","product":"Volume Manager Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69408","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","product":"Microsoft Windows Media Foundation","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69409","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69410","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69412","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69413","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","product":"Windows USB Audio Class driver (usbaudio.sys)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69415","title":"Windows DHCP Server Elevation of Privilege Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69416","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69417","title":"Microsoft Office SharePoint Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":7.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69418","title":"Volume Manager Driver Elevation of Privilege Vulnerability","product":"Volume Manager Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69420","title":"Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability","product":"Windows VOLSNAP.SYS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69421","title":"Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","product":"Windows Kernel Mode Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69422","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","product":"Windows USB Video Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69423","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","product":"Windows USB Video Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69424","title":"Windows Distributed File System (DFS) Elevation of Privilege Vulnerability","product":"Windows Distributed File System (DFS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69425","title":"Windows NTFS Tampering Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Tampering","severity":"Important","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69426","title":"Windows VOLSNAP.SYS Remote Code Execution Vulnerability","product":"Windows VOLSNAP.SYS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69427","title":"Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability","product":"Windows VOLSNAP.SYS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69428","title":"Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability","product":"Windows LDAP - Lightweight Directory Access Protocol","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69429","title":"Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability","product":"Windows IKE Extension","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69430","title":"Windows Embedded Mode Service Elevation of Privilege Vulnerability","product":"Windows Embedded Mode Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69431","title":"Telnet Client Remote Code Execution Vulnerability","product":"Telnet Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69432","title":"Volume Manager Driver Elevation of Privilege Vulnerability","product":"Volume Manager Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69433","title":"Windows Error Reporting Elevation of Privilege Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69434","title":"Windows URL Moniker Remote Code Execution Vulnerability","product":"Windows URL Moniker","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69436","title":"Windows Error Reporting Elevation of Privilege Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69438","title":"Microsoft JScript Remote Code Execution Vulnerability","product":"Microsoft JScript","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69439","title":".NET and Visual Studio Elevation of Privilege Vulnerability","product":".NET and Visual Studio","family":"Developer Tools","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69440","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","product":"Windows MIDI Service Module","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69441","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69442","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69443","title":"Windows Device Health Attestation (DHA) Information Disclosure Vulnerability","product":"Windows Device Health Attestation (DHA)","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69444","title":"Microsoft Windows Speech Elevation of Privilege Vulnerability","product":"Microsoft Windows Speech","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69445","title":"Windows Compressed Folder Elevation of Privilege Vulnerability","product":"Windows Compressed Folder","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69447","title":"Windows Audio Service Elevation of Privilege Vulnerability","product":"Windows Audio Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69448","title":"Windows Bluetooth Service Elevation of Privilege Vulnerability","product":"Windows Bluetooth Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69449","title":"Windows BitLocker Remote Code Execution Vulnerability","product":"Windows BitLocker","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69450","title":"Windows Error Reporting Elevation of Privilege Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69451","title":"Windows Management Instrumentation Elevation of Privilege Vulnerability","product":"Windows Management Instrumentation","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69453","title":"Microsoft Windows Search Component Tampering Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Tampering","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69455","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","product":"Windows Remote Access Connection Manager","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69456","title":"Microsoft Windows Speech Elevation of Privilege Vulnerability","product":"Microsoft Windows Speech","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69457","title":"Windows USB Driver Information Disclosure Vulnerability","product":"Windows USB Driver","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69458","title":"Windows BitLocker Elevation of Privilege Vulnerability","product":"Windows BitLocker","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69459","title":"Windows Power Dependency Coordinator Elevation of Privilege Vulnerability","product":"Windows Power Dependency Coordinator","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69460","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","product":"Windows Modern Device Management (MDM)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69461","title":"Windows NTFS Remote Code Execution Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69462","title":"Windows Error Reporting Elevation of Privilege Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69463","title":"Windows NTFS Remote Code Execution Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69464","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69465","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69466","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69467","title":"Microsoft Graphics Component Elevation of Privilege Vulnerability","product":"Microsoft Graphics Component","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69468","title":"Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability","product":"Windows Volume Manager Extension Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69469","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","product":"Windows USB Audio Class driver (usbaudio.sys)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69470","title":"Connected User Experiences and Telemetry Elevation of Privilege Vulnerability","product":"Windows Connected User Experiences and Telemetry","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69472","title":"Windows Devices Human Interface Elevation of Privilege Vulnerability","product":"Windows Devices Human Interface","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69473","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69474","title":"Windows Overlay Filter Information Disclosure Vulnerability","product":"Windows Overlay Filter","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69475","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69476","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69477","title":"Microsoft Office Access Remote Code Execution Vulnerability","product":"Microsoft Office Access","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69478","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69479","title":"Windows NTFS Remote Code Execution Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69480","title":"Windows Partition Management Driver Elevation of Privilege Vulnerability","product":"Windows Partition Management Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69481","title":"Windows Enterprise App Management Elevation of Privilege Vulnerability","product":"Windows Enterprise App Management","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69482","title":"Windows Error Reporting Tampering Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Tampering","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69483","title":"Windows Image Acquisition Information Disclosure Vulnerability","product":"Windows Image Acquisition","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69485","title":"Remote Desktop Client Remote Code Execution Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69488","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69489","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69490","title":"Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability","product":"Windows USB Mass Storage Class Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69491","title":"Microsoft DirectMusic Remote Code Execution Vulnerability","product":"Windows Microsoft DirectMusic","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69492","title":"Windows Partition Management Driver Elevation of Privilege Vulnerability","product":"Windows Partition Management Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69493","title":"Windows Event Logging Service Remote Code Execution Vulnerability","product":"Windows Event Logging Service","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69494","title":"Windows Event Logging Service Remote Code Execution Vulnerability","product":"Windows Event Logging Service","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69495","title":"Windows Event Logging Service Remote Code Execution Vulnerability","product":"Windows Event Logging Service","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69496","title":"Windows Compressed Folder Remote Code Execution Vulnerability","product":"Windows Compressed Folder","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69497","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69498","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69499","title":"Windows Imaging Component Remote Code Execution Vulnerability","product":"Windows Imaging Component","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69500","title":"Windows Image Acquisition Elevation of Privilege Vulnerability","product":"Windows Image Acquisition","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69501","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","product":"Windows Secure Kernel Mode","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69503","title":"Windows USB Driver Elevation of Privilege Vulnerability","product":"Windows USB Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69504","title":"Windows NTFS Information Disclosure Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69505","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69507","title":"Microsoft Windows Search Component Information Disclosure Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69508","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","product":"Windows MIDI Service Module","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69509","title":"Role: Windows Fax Service Elevation of Privilege Vulnerability","product":"Role: Windows Fax Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69510","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69511","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","product":"Microsoft Windows Media Foundation","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69512","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69513","title":"Windows Error Reporting Elevation of Privilege Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69514","title":"Remote Desktop Services Remote Code Execution Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69516","title":"Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability","product":"Connected Devices Platform Service (Cdpsvc)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69517","title":"Windows Wireless Networking Elevation of Privilege Vulnerability","product":"Windows Wireless Networking","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69518","title":"Windows Remote Desktop Remote Code Execution Vulnerability","product":"Windows Remote Desktop","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69522","title":".NET and Visual Studio Remote Code Execution Vulnerability","product":"Visual Studio","family":"Developer Tools","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69524","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","product":"Active Directory Domain Services","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69525","title":"Remote Desktop Services Remote Code Execution Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69527","title":"Windows USB Mass Storage Class Driver Information Disclosure Vulnerability","product":"Windows USB Mass Storage Class Driver","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69528","title":"Windows Shell Elevation of Privilege Vulnerability","product":"Windows Shell","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69529","title":"Microsoft Office Access Remote Code Execution Vulnerability","product":"Microsoft Office Access","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69530","title":"Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","product":"Reliable Multicast Transport Driver (RMCAST)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69531","title":"Microsoft Windows Speech Tampering Vulnerability","product":"Microsoft Windows Speech","family":"Windows","impact":"Tampering","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69532","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69534","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","product":"Windows Program Compatibility Assistant Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69535","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69536","title":"Remote Desktop Services Remote Code Execution Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69538","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69539","title":"Remote Desktop Services Remote Code Execution Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69540","title":"Windows Audio Service Elevation of Privilege Vulnerability","product":"Windows Audio Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69541","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","product":"Virtual Hard Disk (VHD) Miniport Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69542","title":"Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability","product":"Windows Camera Frame Server Monitor","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69544","title":"Windows SMB Client Elevation of Privilege Vulnerability","product":"Windows SMB Client","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69546","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","product":"Active Directory Domain Services","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69547","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69548","title":"Windows RNDIS Information Disclosure Vulnerability","product":"Windows RNDIS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69549","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","product":"Virtual Hard Disk (VHD) Miniport Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69551","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69552","title":"Windows Print Spooler Components Information Disclosure Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69553","title":"Windows Hyper-V Elevation of Privilege Vulnerability","product":"Windows Hyper-V","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69554","title":"Microsoft Windows Search Component Tampering Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Tampering","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69556","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69559","title":"Microsoft Teams for Android Information Disclosure Vulnerability","product":"Microsoft Teams for Android","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69560","title":"Windows Work Folder Service Elevation of Privilege Vulnerability","product":"Windows Work Folder Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69561","title":"Windows CD-ROM Driver Elevation of Privilege Vulnerability","product":"Windows CD-ROM Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69562","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69563","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","product":"Windows Program Compatibility Assistant Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69564","title":"Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability","product":"Windows Online Certificate Status Protocol (OCSP)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69566","title":"Windows NTFS Remote Code Execution Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69567","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69568","title":"Storage Spaces Controller Information Disclosure Vulnerability","product":"Windows Storage Spaces Controller","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69569","title":"Windows Print Spooler Components Denial of Service Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69571","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","product":"Windows USB Audio Class driver (usbaudio.sys)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69572","title":"Windows SMB Client Information Disclosure Vulnerability","product":"Windows SMB Client","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69573","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","product":"Windows Universal Disk Format File System Driver (UDFS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69574","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69575","title":"Windows Storage Spaces Controller Elevation of Privilege Vulnerability","product":"Windows Storage Spaces Controller","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69576","title":"Graphic Fonts Elevation of Privilege Vulnerability","product":"Graphic Fonts","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69578","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69579","title":"Windows Message Queuing Remote Code Execution Vulnerability","product":"Windows Message Queuing","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69580","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69581","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69582","title":"Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability","product":"Windows Volume Manager Extension Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69583","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69584","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","product":"Windows USB Video Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69585","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69586","title":"Microsoft Windows PDF Remote Code Execution Vulnerability","product":"Microsoft Windows PDF","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69587","title":"Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability","product":"Windows IKE Extension","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69588","title":"Windows TCP/IP Denial of Service Vulnerability","product":"Windows TCP/IP","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69589","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69590","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","product":"Windows Routing and Remote Access Service (RRAS)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69591","title":"Windows NTFS Information Disclosure Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69592","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","product":"Windows Universal Disk Format File System Driver (UDFS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69593","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69594","title":"Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability","product":"Microsoft Local Security Authority Server (lsasrv)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69595","title":"Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability","product":"Windows Services for NFS ONCRPC XDR Driver","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69597","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","product":"Windows HTTP.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69598","title":"Windows iSCSI Remote Code Execution Vulnerability","product":"Windows iSCSI","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69599","title":"Remote Desktop Services Remote Code Execution Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69600","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69601","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","product":"Microsoft Windows Media Foundation","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69602","title":"Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability","product":"Windows PrintWorkflowUserSvc","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69603","title":"Windows Hyper-V Remote Code Execution Vulnerability","product":"Windows Hyper-V","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69604","title":"Windows Audio Service Elevation of Privilege Vulnerability","product":"Windows Audio Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69605","title":"Microsoft Install Service Elevation of Privilege Vulnerability","product":"Microsoft Install Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69606","title":"Windows Shell Elevation of Privilege Vulnerability","product":"Windows Shell","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69607","title":"Windows Deployment Services Remote Code Execution Vulnerability","product":"Windows Deployment Services","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69608","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69609","title":"Win32k Information Disclosure Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69610","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69611","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","product":"Virtual Hard Disk (VHD) Miniport Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69612","title":"Windows Error Reporting Elevation of Privilege Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69613","title":"Windows Image Acquisition Elevation of Privilege Vulnerability","product":"Windows Image Acquisition","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69614","title":"Microsoft Office Access Remote Code Execution Vulnerability","product":"Microsoft Office Access","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69615","title":"Microsoft Office SharePoint Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":3.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69616","title":"Windows Remote Desktop Services Information Disclosure Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69617","title":"Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","product":"Windows Resilient File System (ReFS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69618","title":"Windows SMB Client Information Disclosure Vulnerability","product":"Windows SMB Client","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69619","title":"Windows exFAT File System Elevation of Privilege Vulnerability","product":"Windows exFAT File System","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69620","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69621","title":"Role: Windows Fax Service Elevation of Privilege Vulnerability","product":"Role: Windows Fax Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69623","title":"Windows HTTP Print Provider Remote Code Execution Vulnerability","product":"Windows HTTP Print Provider","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69624","title":"Active Directory Certificate Services (AD CS) Tampering Vulnerability","product":"Active Directory Certificate Services (AD CS)","family":"Windows","impact":"Tampering","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69625","title":"Connected User Experiences and Telemetry Elevation of Privilege Vulnerability","product":"Windows Connected User Experiences and Telemetry","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69626","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69627","title":"Windows Remote Desktop Licensing Service Information Disclosure Vulnerability","product":"Windows Remote Desktop Licensing Service","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69628","title":"Windows iSCSI Remote Code Execution Vulnerability","product":"Windows iSCSI","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69629","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","product":"Microsoft Office Outlook","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69630","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69631","title":"Windows DNS Denial of Service Vulnerability","product":"Windows DNS","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69632","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69636","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69637","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69638","title":"Windows NTFS Remote Code Execution Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69641","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","product":"Microsoft Exchange Server","family":"ESU","impact":"Elevation of Privilege","severity":"Important","cvss":9.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69642","title":"Skype for Business Spoofing Vulnerability","product":"Skype for Business","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69643","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69645","title":"Windows Message Queuing Elevation of Privilege Vulnerability","product":"Windows Message Queuing","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69646","title":"Skype for Business Spoofing Vulnerability","product":"Skype for Business","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":8.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69648","title":"Windows Notification Elevation of Privilege Vulnerability","product":"Windows Notification","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69649","title":"Raw Image Extension Remote Code Execution Vulnerability","product":"Windows Raw Image Extension","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69652","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69654","title":"Windows Accounts Control Elevation of Privilege Vulnerability","product":"Windows Accounts Control","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69664","title":"httpd parks a request worker indefinitely on a malformed chunk size sent after the headers","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-69669","title":"Windows Kernel Remote Code Execution Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69671","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69672","title":"Windows DNS Information Disclosure Vulnerability","product":"Windows DNS","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69674","title":"Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability","product":"Windows Modern Device Management (MDM)","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69676","title":"Windows Kerberos Remote Code Execution Vulnerability","product":"Windows Kerberos","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69678","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69679","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69680","title":"Windows DNS Spoofing Vulnerability","product":"Windows DNS","family":"Windows","impact":"Spoofing","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69681","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","product":"Virtual Hard Disk (VHD) Miniport Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69682","title":"Windows Host Guardian Service Elevation of Privilege Vulnerability","product":"Windows Host Guardian Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69683","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69684","title":"Windows Error Reporting Information Disclosure Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69685","title":"Windows Kerberos Elevation of Privilege Vulnerability","product":"Windows Kerberos","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69686","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69687","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","product":"Windows USB Audio Class driver (usbaudio.sys)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69688","title":"Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability","product":"Windows Encrypting File System (EFS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69689","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69690","title":"Microsoft Office SharePoint Spoofing Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Spoofing","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69691","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69692","title":"Windows Audio Service Elevation of Privilege Vulnerability","product":"Windows Audio Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69693","title":"Windows Device Association Broker Service Elevation of Privilege Vulnerability","product":"Windows Device Association Broker service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69694","title":"Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability","product":"Windows IP Address Management (IPAM) Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69706","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69707","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","product":"Windows USB Audio Class driver (usbaudio.sys)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69708","title":"Windows Web Platform Storage Elevation of Privilege Vulnerability","product":"Windows Web Platform Storage","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69709","title":"Windows NTFS Remote Code Execution Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69710","title":"Windows Hello Elevation of Privilege Vulnerability","product":"Windows Hello","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69711","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69712","title":"Windows Key Distribution Center Remote Code Execution Vulnerability","product":"Windows Key Distribution Center","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69713","title":"Windows Secure Boot Security Feature Bypass Vulnerability","product":"Windows Secure Boot","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69714","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69715","title":"Windows Direct Show Remote Code Execution Vulnerability","product":"Windows Direct Show","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69716","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69717","title":"Windows Group Policy Elevation of Privilege Vulnerability","product":"Windows Group Policy","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69719","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69720","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","product":"Windows MIDI Service Module","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69722","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69723","title":"Windows Kernel Information Disclosure Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69724","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69725","title":"Windows Hello Elevation of Privilege Vulnerability","product":"Windows Hello","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69727","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69729","title":"Windows Credential Providers Remote Code Execution Vulnerability","product":"Windows Credential Providers","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69730","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69731","title":"HID Class Driver Elevation of Privilege Vulnerability","product":"HID class driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69732","title":"Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability","product":"Windows Link Layer Topology Discovery Protocol","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69734","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69735","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","product":"Windows Broadcast DVR User Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69738","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69739","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69740","title":"Windows Hello Elevation of Privilege Vulnerability","product":"Windows Hello","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69741","title":"Windows Spaceport.sys Information Disclosure Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69742","title":"Microsoft Office Publisher Remote Code Execution Vulnerability","product":"Microsoft Office Publisher","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69744","title":"Windows Kerberos Denial of Service Vulnerability","product":"Windows Kerberos","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69757","title":"Windows TCP/IP Elevation of Privilege Vulnerability","product":"Windows TCP/IP","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69758","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","product":"Windows Universal Disk Format File System Driver (UDFS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69759","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69760","title":"Windows Kerberos Denial of Service Vulnerability","product":"Windows Kerberos","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69761","title":"Windows TCP/IP Elevation of Privilege Vulnerability","product":"Windows TCP/IP","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69762","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69764","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69767","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69768","title":"Windows RNDIS Remote Code Execution Vulnerability","product":"Windows RNDIS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69769","title":"Windows HTTP Print Provider Remote Code Execution Vulnerability","product":"Windows HTTP Print Provider","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69770","title":"Windows Spaceport.sys Information Disclosure Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69771","title":"Windows Container Manager Service Security Feature Bypass Vulnerability","product":"Windows Container Manager Service","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69772","title":"Windows Network File System Remote Code Execution Vulnerability","product":"Windows Network File System","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69773","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69775","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","product":"Windows DWM Core Library","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69777","title":"Windows DHCP Client Elevation of Privilege Vulnerability","product":"Windows DHCP Client","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69778","title":"Microsoft Office Access Remote Code Execution Vulnerability","product":"Microsoft Office Access","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69779","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69781","title":"Windows DHCP Client Denial of Service Vulnerability","product":"Windows DHCP Client","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69782","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Role: DNS Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69784","title":"Windows Hello Elevation of Privilege Vulnerability","product":"Windows Hello","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69785","title":"Windows Smart Card Elevation of Privilege Vulnerability","product":"Windows Smart Card","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69786","title":"Windows Text Shaping Remote Code Execution Vulnerability","product":"Windows Text Shaping","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69787","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69790","title":"Windows Credential Providers Elevation of Privilege Vulnerability","product":"Windows Credential Providers","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69791","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69792","title":"Windows Win32K Security Feature Bypass Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69793","title":"Windows TCP/IP Security Feature Bypass Vulnerability","product":"Windows TCP/IP","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69794","title":"Windows Encrypting File System (EFS) Information Disclosure Vulnerability","product":"Windows Encrypting File System (EFS)","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69797","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69799","title":"Windows Hello Elevation of Privilege Vulnerability","product":"Windows Hello","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69801","title":"Windows Audio Service Elevation of Privilege Vulnerability","product":"Windows Audio Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69803","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69804","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69805","title":".NET Elevation of Privilege Vulnerability","product":".NET","family":"Developer Tools","impact":"Elevation of Privilege","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69806","title":".NET Elevation of Privilege Vulnerability","product":".NET","family":"Developer Tools","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69807","title":"PowerShell Elevation of Privilege Vulnerability","product":"Windows PowerShell","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69808","title":"Win32k Information Disclosure Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69809","title":"Windows Active Directory Domain Services Denial of Service Vulnerability","product":"Active Directory Domain Services","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69813","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69814","title":"Windows Credential Providers Elevation of Privilege Vulnerability","product":"Windows Credential Providers","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69816","title":"Windows Accounts Control Elevation of Privilege Vulnerability","product":"Windows Accounts Control","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69817","title":"Windows Bluetooth Port Driver Elevation of Privilege Vulnerability","product":"Windows Bluetooth Port Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69818","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69819","title":"RPC Runtime Library Remote Code Execution Vulnerability","product":"RPC Runtime","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69820","title":"Windows Hello Elevation of Privilege Vulnerability","product":"Windows Hello","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69821","title":"Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability","product":"Active Directory Certificate Services (AD CS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69822","title":"Windows Kerberos Elevation of Privilege Vulnerability","product":"Windows Kerberos","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69824","title":"Microsoft Standard XPS Remote Code Execution Vulnerability","product":"Microsoft Standard XPS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69826","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69827","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Role: DNS Server","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69829","title":"Windows Shell Remote Code Execution Vulnerability","product":"Windows Shell","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69832","title":"Win32k Information Disclosure Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69834","title":"Windows ALPC Elevation of Privilege Vulnerability","product":"Windows ALPC","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69838","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69839","title":"Windows iSCSI Target Service Denial of Service Vulnerability","product":"Windows iSCSI Target Service","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69841","title":"Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability","product":"Windows Encrypting File System (EFS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69844","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69845","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69846","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","product":"Windows Secure Kernel Mode","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69847","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69852","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","product":"Windows Routing and Remote Access Service (RRAS)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69853","title":"Win32k Information Disclosure Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69854","title":"Spring Cloud Azure Elevation of Privilege Vulnerability","product":"Spring Cloud Azure","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69857","title":"Azure Cosmos DB Spoofing Vulnerability","product":"Azure Cosmos DB","family":"Azure","impact":"Spoofing","severity":"Critical","cvss":8.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-69858","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69859","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","product":"Windows USB Audio Class driver (usbaudio.sys)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69860","title":"Windows Imaging Component Remote Code Execution Vulnerability","product":"Windows Imaging Component","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69862","title":"Windows Wireless Wide Area Network Service Information Disclosure Vulnerability","product":"Windows Wireless Wide Area Network Service","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69864","title":"Windows Hello Elevation of Privilege Vulnerability","product":"Windows Hello","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69866","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69874","title":"Windows ALPC Elevation of Privilege Vulnerability","product":"Windows ALPC","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69875","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69876","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69878","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69881","title":"Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability","product":"Windows IKE Extension","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69889","title":"Windows Bluetooth Service Elevation of Privilege Vulnerability","product":"Windows Bluetooth Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69890","title":"Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability","product":"Windows Virtual Trusted Platform Module","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69891","title":"Windows Media Elevation of Privilege Vulnerability","product":"Windows Media","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69895","title":"Windows Spaceport.sys Information Disclosure Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69896","title":"Windows Error Reporting Elevation of Privilege Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69900","title":"Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability","product":"Kernel Streaming WOW Thunk Service Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69904","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","product":"Microsoft Office SharePoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":3.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69906","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","product":"Windows Secure Kernel Mode","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69907","title":"Windows Enterprise App Management Elevation of Privilege Vulnerability","product":"Windows Enterprise App Management","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69910","title":"Windows Hyper-V Remote Code Execution Vulnerability","product":"Windows Hyper-V","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69911","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69921","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69929","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69930","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-69989","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Role: DNS Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70019","title":"Windows Compressed Folder Information Disclosure Vulnerability","product":"Windows Compressed Folder","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70065","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70091","title":"Windows DNS Denial of Service Vulnerability","product":"Windows DNS","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70124","title":"Windows DHCP Server Information Disclosure Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70145","title":"Microsoft Windows Search Component Information Disclosure Vulnerability","product":"Microsoft Windows Search Component","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70178","title":"Microsoft Fabric Elevation of Privilege Vulnerability","product":"Microsoft Fabric","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Critical","cvss":8.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-70203","title":"Windows Media Player Remote Code Execution Vulnerability","product":"Windows Media Player","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70283","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32K","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70289","title":"Windows Win32k Elevation of Privilege Vulnerability","product":"Windows Win32 Kernel Subsystem","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70290","title":"Win32k Information Disclosure Vulnerability","product":"Windows Win32 Kernel Subsystem","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70296","title":"Windows Imaging Component Remote Code Execution Vulnerability","product":"Windows Imaging Component","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70334","title":"Visual Studio Code Security Feature Bypass Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70342","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","product":"Windows Ancillary Function Driver for WinSock","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70351","title":"Microsoft WebP Image Extension Remote Code Execution Vulnerability","product":"Microsoft WebP Image Extension","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70352","title":"Azure AI Language Elevation of Privilege Vulnerability","product":"Azure AI Language","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":10,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-70409","title":"eldap does not bound the port component of a referral URL before integer conversion","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-70562","title":"Windows Audio Service Elevation of Privilege Vulnerability","product":"Windows Audio Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70563","title":"Windows Shell Spoofing Vulnerability","product":"Windows Shell","family":"Windows","impact":"Spoofing","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70564","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70565","title":"Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability","product":"Windows AF_UNIX Socket Provider","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70567","title":"Windows Display Enhancement Service Elevation of Privilege Vulnerability","product":"Windows Display Enhancement Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70568","title":"Windows Defender Firewall Service Elevation of Privilege Vulnerability","product":"Windows Defender Firewall Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70569","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70570","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","product":"Windows Routing and Remote Access Service (RRAS)","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70572","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70573","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70574","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","product":"Virtual Hard Disk (VHD) Miniport Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70575","title":"Windows Schannel Denial of Service Vulnerability","product":"Windows Schannel","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70577","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","product":"Windows Modern Device Management (MDM)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70578","title":"Windows Credential Guard Elevation of Privilege Vulnerability","product":"Windows Credential Guard","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70579","title":"Windows Mobile Broadband Information Disclosure Vulnerability","product":"Windows Mobile Broadband","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70581","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70582","title":"Windows Management Instrumentation Elevation of Privilege Vulnerability","product":"Windows Management Instrumentation","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70583","title":"Windows Core Messaging Elevation of Privilege Vulnerability","product":"Windows Core Messaging","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70584","title":"Windows Core Messaging Elevation of Privilege Vulnerability","product":"Windows Core Messaging","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70585","title":"Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability","product":"Windows Services for NFS ONCRPC XDR Driver","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70586","title":"Windows Paint Remote Code Execution Vulnerability","product":"Windows Paint","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-70587","title":"Windows Remote Desktop Protocol Information Disclosure Vulnerability","product":"Windows Remote Desktop Protocol","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71328","title":".NET and Visual Studio Remote Code Execution Vulnerability","product":"Visual Studio","family":"Developer Tools","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71329","title":"Windows NTFS Remote Code Execution Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71330","title":"Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability","product":"Windows Services for NFS ONCRPC XDR Driver","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71332","title":"Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability","product":"Windows Secure Socket Tunneling Protocol (SSTP)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71333","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","product":"Windows Remote Access Connection Manager","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71334","title":"Windows NFS Portmapper Elevation of Privilege Vulnerability","product":"Windows NFS Portmapper","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71336","title":"Windows Work Folder Service Remote Code Execution Vulnerability","product":"Windows Work Folder Service","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71337","title":"Windows Storage Management Provider Elevation of Privilege Vulnerability","product":"Windows Storage Management Provider","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71338","title":"Windows Failover Cluster Elevation of Privilege Vulnerability","product":"Windows Failover Cluster","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71339","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71340","title":"Windows File History Service Elevation of Privilege Vulnerability","product":"Windows File History Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71341","title":"Windows Partition Management Driver Information Disclosure Vulnerability","product":"Windows Partition Management Driver","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71342","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","product":"Windows Remote Access Connection Manager","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71343","title":"Windows Remote Access Connection Manager Remote Code Execution Vulnerability","product":"Windows Remote Access Connection Manager","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71345","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71348","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71349","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71350","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71351","title":"Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability","product":"Windows Routing and Remote Access Service (RRAS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71352","title":"Windows Remote Access Connection Manager Remote Code Execution Vulnerability","product":"Windows Remote Access Connection Manager","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71353","title":"Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability","product":"Windows Routing and Remote Access Service (RRAS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-71380","title":"httpd applies no timeout while receiving a request body, parking a worker on a stalled client","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-71562","title":"httpc does not bound server-supplied numeric header values before integer conversion","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-72649","title":"Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"elastic","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-72926","title":"Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability","product":"Windows Internet Connection Sharing (ICS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72927","title":"Winsock Elevation of Privilege Vulnerability","product":"Winsock","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72928","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72929","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72930","title":"Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability","product":"Windows Secure Socket Tunneling Protocol (SSTP)","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72931","title":"Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability","product":"Windows Secure Socket Tunneling Protocol (SSTP)","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72932","title":"Windows Message Queuing Queue Manager Information Disclosure Vulnerability","product":"Windows Message Queuing Queue Manager","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72933","title":"Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability","product":"Microsoft WDAC OLE DB provider for SQL","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72935","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72936","title":"Windows SMB Client Remote Code Execution Vulnerability","product":"Windows SMB Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72937","title":"Windows Storage Port Driver Information Disclosure Vulnerability","product":"Storage Port Driver","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72938","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72939","title":"Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability","product":"Windows Routing and Remote Access Service (RRAS)","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72940","title":"Windows Schannel Remote Code Execution Vulnerability","product":"Windows Schannel","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72941","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72942","title":"Windows Spaceport.sys Information Disclosure Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72943","title":"Windows Deployment Services Remote Code Execution Vulnerability","product":"Windows Deployment Services","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72944","title":"Role: Windows Fax Service Elevation of Privilege Vulnerability","product":"Role: Windows Fax Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72945","title":"Windows Task Scheduler Information Disclosure Vulnerability","product":"Windows Task Scheduler","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72946","title":"Microsoft Storage Port Driver Elevation of Privilege Vulnerability","product":"Storage Port Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72947","title":"Windows File History Service Elevation of Privilege Vulnerability","product":"Windows File History Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72948","title":"Windows DNS Elevation of Privilege Vulnerability","product":"Windows DNS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72949","title":"Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability","product":"Windows SMB Server Network Transport Driver (srvnet.sys)","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72950","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","product":"Windows Routing and Remote Access Service (RRAS)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72952","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","product":"Windows Spaceport.sys","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72953","title":"Windows USB Driver Elevation of Privilege Vulnerability","product":"Windows USB Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72954","title":"Windows Deployment Services Remote Code Execution Vulnerability","product":"Windows Deployment Services","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72956","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72957","title":"Windows Deployment Services Remote Code Execution Vulnerability","product":"Windows Deployment Services","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72958","title":"Windows Credential Guard Elevation of Privilege Vulnerability","product":"Windows Credential Guard","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72959","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","product":"Windows Routing and Remote Access Service (RRAS)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72960","title":"Windows Media Player Remote Code Execution Vulnerability","product":"Windows Media Player","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72961","title":"Windows Hyper-V Elevation of Privilege Vulnerability","product":"Windows Hyper-V","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72962","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","product":"Windows USB Video Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72963","title":"Windows Modern Execution Server Elevation of Privilege Vulnerability","product":"Windows Modern Execution Server","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72964","title":"Windows Internet Connection Sharing (ICS) Tampering Vulnerability","product":"Windows Internet Connection Sharing (ICS)","family":"Windows","impact":"Tampering","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72965","title":"Windows WebClient Service Elevation of Privilege Vulnerability","product":"Windows WebClient Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72966","title":"Windows Remote Access Connection Manager Tampering Vulnerability","product":"Windows Remote Access Connection Manager","family":"Windows","impact":"Tampering","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72967","title":"Windows Network Connection Broker Elevation of Privilege Vulnerability","product":"Windows Network Connection Broker","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72972","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72973","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72974","title":"Microsoft Office Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72975","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72976","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72977","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72978","title":"Active Directory Federation Services (AD FS) Denial of Service Vulnerability","product":"Active Directory Federation Services (AD FS)","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72979","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72980","title":"Windows Hello Security Feature Bypass Vulnerability","product":"Windows Hello","family":"Windows","impact":"Security Feature Bypass","severity":"Critical","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72981","title":"IP Helper Remote Code Execution Vulnerability","product":"IP Helper","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72982","title":"Windows Netlogon Remote Code Execution Vulnerability","product":"Windows Netlogon","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72983","title":"Internet Connection Sharing (ICS) Remote Code Execution Vulnerability","product":"Windows Internet Connection Sharing (ICS)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72985","title":"Volume Shadow Copy Elevation of Privilege Vulnerability","product":"Windows Volume Shadow Copy","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72986","title":"Graphic Fonts Remote Code Execution Vulnerability","product":"Graphic Fonts","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72987","title":"Windows DNS Remote Code Execution Vulnerability","product":"Windows DNS","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72988","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72989","title":"Windows Failover Cluster Information Disclosure Vulnerability","product":"Windows Failover Cluster","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72990","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72991","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72992","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72993","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72994","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72995","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72996","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72997","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-72999","title":"Windows USB Hub Driver Elevation of Privilege Vulnerability","product":"Windows USB Hub Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73000","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73001","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73002","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73003","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","product":"Windows Modern Device Management (MDM)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73004","title":"Windows Autopilot Tampering Vulnerability","product":"Windows Autopilot","family":"Windows","impact":"Tampering","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73005","title":"Windows Authentication Methods Elevation of Privilege Vulnerability","product":"Windows Authentication Methods","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73006","title":"DirectWrite Remote Code Execution Vulnerability","product":"Microsoft Graphics Component","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73007","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73008","title":"Windows Biometric Service Information Disclosure Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73009","title":"Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability","product":"Windows Secure Socket Tunneling Protocol (SSTP)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73010","title":"Microsoft Failover Cluster Remote Code Execution Vulnerability","product":"Windows Failover Cluster","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73011","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73012","title":"Windows Management Services Elevation of Privilege Vulnerability","product":"Windows Management Services","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73013","title":"Windows Imaging Component Remote Code Execution Vulnerability","product":"Windows Imaging Component","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73014","title":"Data Sharing Service Client Elevation of Privilege Vulnerability","product":"Data Sharing Service Client","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73015","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73016","title":"DirectWrite Remote Code Execution Vulnerability","product":"Microsoft Graphics Component","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73017","title":"Graphics Kernel Remote Code Execution Vulnerability","product":"Windows Graphics Kernel","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73018","title":"Graphic Fonts Remote Code Execution Vulnerability","product":"Graphic Fonts","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73019","title":"Windows URL Moniker Security Feature Bypass Vulnerability","product":"Windows URL Moniker","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73020","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73021","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73022","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","product":"Windows Modern Device Management (MDM)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73023","title":"Windows Imaging Component Remote Code Execution Vulnerability","product":"Windows Imaging Component","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73024","title":"Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability","product":"Windows Services for NFS ONCRPC XDR Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73025","title":"Windows iSCSI Security Feature Bypass Vulnerability","product":"Windows iSCSI","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73026","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73028","title":"SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73029","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-73270","title":"httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-73276","title":"inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-73812","title":"inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-74835","title":"inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-74994","title":"inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-75538","title":"A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"EEF","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-76642","title":"util-linux libmount Privilege Escalation via Failed Mount Helper","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"VulnCheck","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-77480","title":"SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77481","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77482","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77483","title":"SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77484","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77485","title":"SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77486","title":"Microsoft SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77487","title":"SQL Server Elevation of Privilege Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77488","title":"Microsoft SQL Server Information Disclosure Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77489","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77491","title":"Windows GDI Information Disclosure Vulnerability","product":"Windows GDI","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77492","title":"Windows Storage Port Driver Information Disclosure Vulnerability","product":"Storage Port Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77493","title":"Windows Graphics Component Remote Code Execution Vulnerability","product":"Microsoft Graphics Component","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77494","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77495","title":"Windows Imaging Component Remote Code Execution Vulnerability","product":"Windows Imaging Component","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77498","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77499","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77500","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77501","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77502","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77503","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77504","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77505","title":"Windows DNS Server Remote Code Execution Vulnerability","product":"Role: DNS Server","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77886","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77887","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77888","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77889","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77890","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77891","title":"Windows DHCP Server Remote Code Execution Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":6.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77892","title":"Windows Boot Manager Elevation of Privilege Vulnerability","product":"Windows Boot Manager","family":"Windows","impact":"Security Feature Bypass","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77893","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77894","title":"Windows Installer Elevation of Privilege Vulnerability","product":"Windows Installer","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77895","title":"Windows DHCP Server Denial of Service Vulnerability","product":"Windows DHCP Server","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77896","title":"Windows Remote Desktop Client Denial of Service Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77897","title":"Microsoft Power Automate Desktop Elevation of Privilege Vulnerability","product":"Power Automate","family":"Microsoft Dynamics","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77898","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77899","title":"Windows Security Center Elevation of Privilege Vulnerability","product":"Windows Security Center","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77901","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77904","title":"Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability","product":"Windows Volume Manager Extension Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77905","title":"Windows Management Instrumentation Elevation of Privilege Vulnerability","product":"Windows Management Instrumentation","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77906","title":"Visual Studio Remote Code Execution Vulnerability","product":"Visual Studio","family":"Developer Tools","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77907","title":"Visual Studio Remote Code Execution Vulnerability","product":"Visual Studio","family":"Developer Tools","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77908","title":"Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability","product":"Microsoft Dynamics 365","family":"Microsoft Dynamics","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77909","title":"Azure CycleCloud Information Disclosure Vulnerability","product":"Azure CycleCloud","family":"Azure","impact":"Information Disclosure","severity":"Important","cvss":7.7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-77911","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78222","title":"NGINX ngx_http_js_module vulnerability","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"f5","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-78408","title":"Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-78410","title":"Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-78439","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","product":"Microsoft Graphics Component","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78441","title":"Windows OLE DB Information Disclosure Vulnerability","product":"Windows OLE DB","family":"SQL Server","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78442","title":"Windows OLE DB Remote Code Execution Vulnerability","product":"Windows OLE DB","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78444","title":"Microsoft Failover Cluster Remote Code Execution Vulnerability","product":"Windows Failover Cluster","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78445","title":"Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability","product":"Windows Services for NFS ONCRPC XDR Driver","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78446","title":"Windows Distributed File System (DFS) Denial of Service Vulnerability","product":"Windows Distributed File System (DFS)","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78447","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78448","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78449","title":"Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","product":"Reliable Multicast Transport Driver (RMCAST)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78450","title":"Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","product":"Reliable Multicast Transport Driver (RMCAST)","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78451","title":"Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability","product":"Microsoft Windows SCSI Class System File","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":6.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78452","title":"Microsoft Windows SCSI Class System File Information Disclosure Vulnerability","product":"Microsoft Windows SCSI Class System File","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78453","title":"Microsoft Windows SCSI Class System File Information Disclosure Vulnerability","product":"Microsoft Windows SCSI Class System File","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78454","title":"Windows CD-ROM Driver Information Disclosure Vulnerability","product":"Windows CD-ROM Driver","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78455","title":"Xbox Information Disclosure Vulnerability","product":"Xbox","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78456","title":"SQL Server Remote Code Execution Vulnerability","product":"SQL Server","family":"SQL Server","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78457","title":"Windows Security Health Service Elevation of Privilege Vulnerability","product":"Windows Security Health Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78461","title":"Visual Studio Code Security Feature Bypass Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":7.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78462","title":"Visual Studio Code Security Feature Bypass Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78463","title":"Remote Desktop Client Remote Code Execution Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78464","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","product":"Windows MIDI Service Module","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78502","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78503","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78504","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78505","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78506","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78507","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78508","title":"Windows CD-ROM Driver Information Disclosure Vulnerability","product":"Windows CD-ROM Driver","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78509","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","product":"Microsoft Office Outlook","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78510","title":"Microsoft Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78511","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78512","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78513","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78514","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78515","title":"Microsoft Office Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78516","title":"Windows Storage Information Disclosure Vulnerability","product":"Windows Storage","family":"Windows","impact":"Information Disclosure","severity":"Important","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78517","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78518","title":"Microsoft Office Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78519","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","product":"Microsoft Office Outlook","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78520","title":"Microsoft Office Outlook Information Disclosure Vulnerability","product":"Microsoft Office Outlook","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78521","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78522","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78523","title":"Windows DNS Server Denial of Service Vulnerability","product":"Windows DNS","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78524","title":"Microsoft Office Remote Code Execution Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78525","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","product":"Microsoft Office Outlook","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78526","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-78607","title":"Missing Authorization in Elasticsearch Leading to Information Disclosure","product":"Mariner","family":"Open Source Software","impact":"Unknown","severity":"Moderate","cvss":5.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"elastic","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-78662","title":"Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Go","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-78689","title":"NGINX ngx_http_js_module vulnerablility","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"f5","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80073","title":"Microsoft Office Outlook Information Disclosure Vulnerability","product":"Microsoft Office Outlook","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80074","title":"Remote Desktop Client Remote Code Execution Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80075","title":"Windows Work Folders Elevation of Privilege Vulnerability","product":"Windows Work Folders","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80076","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80077","title":"Remote Desktop Client Remote Code Execution Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80078","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80079","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80080","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80081","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80082","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80083","title":"Windows Hyper-V Remote Code Execution Vulnerability","product":"Windows Hyper-V","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80084","title":"Microsoft Office Outlook Information Disclosure Vulnerability","product":"Microsoft Office Outlook","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80085","title":"Microsoft Office Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80086","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","product":"Microsoft Office PowerPoint","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80087","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80088","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80089","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80090","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80091","title":"Microsoft Office Information Disclosure Vulnerability","product":"Microsoft Office","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80093","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","product":"Windows Cloud Files Mini Filter Driver","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80096","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","product":"Windows Remote Desktop Services","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80097","title":"Microsoft Authenticator Elevation of Privilege Vulnerability","product":"Microsoft Authenticator","family":"Apps","impact":"Elevation of Privilege","severity":"Important","cvss":8.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-80098","title":"Copilot Studio Elevation of Privilege Vulnerability","product":"Copilot Studio","family":"Microsoft Office","impact":"Elevation of Privilege","severity":"Critical","cvss":9.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-80726","title":"KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80728","title":"Revert \"drm/amdgpu: fix aperture mapping leak\"","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80730","title":"ring-buffer: Fix crash passing ERR_PTR to kthread_stop()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80731","title":"net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80732","title":"ata: pata_sl82c105: fix bridge revision use-after-free","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80733","title":"net: remove WARN_ON_ONCE() from sk_mc_loop()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80737","title":"serial: amba-pl011: synchronize DMA teardown","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80738","title":"bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80742","title":"af_packet: Don't send zero-byte data in tpacket_snd().","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80743","title":"ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80744","title":"netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80747","title":"drm/amdkfd: Add bounds check for CRAT subtype length","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80752","title":"Input: psxpad-spi - set driver data before use","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80755","title":"selinux: reject a permission value exceeding the class permission count","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80756","title":"selinux: do not cancel a policy conversion that never started","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80757","title":"selinux: reject a class permission count below its inherited common","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80761","title":"Bluetooth: ISO: zero the sockaddr before returning it in getname","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80762","title":"Bluetooth: hci_sync: Fix accept list UAF during suspend","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80763","title":"Bluetooth: hci_event: validate LE Set CIG Parameters response","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80764","title":"Bluetooth: hci_event: fix LE list UAF on reset","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80765","title":"HID: hyperv: validate initial device info bounds","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80766","title":"HID: uclogic: fix use-after-free of inrange_timer on remove","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80767","title":"HID: sensor: custom: Fix use-after-free in enable_sensor","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80768","title":"HID: ft260: fix stack-use-after-return write in I2C read race","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80770","title":"HID: nintendo: stop device IO before hid_hw_stop on probe failure","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80771","title":"HID: nintendo: register input device after capabilities are set","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80772","title":"HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80780","title":"HID: pidff: fix OOB write when hid->inputs is empty","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80782","title":"HID: magicmouse: do not keep a stale msc->input if no input is claimed","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80783","title":"HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80784","title":"mptcp: pm: fix memory leak from alloc-during-teardown race","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80785","title":"fbdev: serialize mode sysfs access with lock_fb_info()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80788","title":"nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80789","title":"nvmet-tcp: bound SGL data length before allocating command buffers","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80790","title":"nvmet-fc: fix invalid free in LS IOD error path","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80791","title":"nvmet-auth: zero the AUTH_RECEIVE response buffer","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80792","title":"ipv6: fix use-after-free in ip6_finish_output2()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80793","title":"ipv4: reject undersized MTUs in ip_do_fragment()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80794","title":"nfc: nci: fix uninit-value in the RF discover/activated NTF handlers","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80796","title":"nfc: nci: add data_len bound checks to activation parameter extractors","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80797","title":"nfc: pn533: purge fragmented skbs during cleanup","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":1.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80798","title":"nfc: llcp: reject PDUs shorter than the LLCP header","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80799","title":"nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80800","title":"nfc: llcp: bound the connect_sn TLV walk to the skb","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80801","title":"nfc: microread: validate target discovery payload lengths","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80802","title":"nfc: fdp: bound the device-reported read length and fix an skb leak","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80803","title":"nfc: digital: clamp SENSF_RES length to the destination buffer","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80805","title":"xfs: validate attr entry pointer before field access","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80806","title":"ext4: don't enable DAX on new encrypted files","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80807","title":"nilfs2: reject invalid block index in GC ioctl","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80808","title":"ext4: stop retrying saturated xattr cache entries","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80809","title":"ocfs2: fix missing metadata reservation for large xattrs","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80819","title":"Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80820","title":"xfs: don't livelock in scrub on a circular unlinked list","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80823","title":"nfc: st21nfca: validate ATR_REQ length against the received frame","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80824","title":"usb: usbfs: fix use-after-free of usb_device in usbdev_release()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80826","title":"USB: c67x00: fix use-after-free in c67x00_add_iso_urb()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80827","title":"USB: serial: option: fix slab OOB read in interrupt URB callback","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":1.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80828","title":"ALSA: usb-audio: Complete cleanup after system-resume errors","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80829","title":"ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80830","title":"usb: core: Add lock to usb_wakeup_notification()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80831","title":"crypto: mxs-dcp - fix source scatterlist length access","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80832","title":"crypto: qce - fix CCM AAD buffer underallocation","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80833","title":"crypto: sun8i-ss - Remove crypto_rng interface","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80834","title":"crypto: sun8i-ce - Remove crypto_rng interface","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80836","title":"crypto: virtio - bound the akcipher result length","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80837","title":"netfilter: nf_tables: don't queue packet path object notifications","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80840","title":"ipv6: seg6: clear IPv4 control block on IPIP decapsulation","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80841","title":"net/packet: defer vmalloc TX_RING free until skbs finish","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80842","title":"net: bridge: mcast: fix use-after-free of a master VLAN's multicast context","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80843","title":"xfrm: fix xfrm_state_construct() auth-trunc leak","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":2.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80844","title":"xfrm: ah6: validate routing header segments_left","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80846","title":"xfrm: drop ESP-in-TCP packets with no ingress device","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80847","title":"tcp: clamp route advmss to TCP_MIN_MSS","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80848","title":"xfrm: espintcp: fix UAF during close","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80851","title":"gtp: serialize PDP context updates","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80852","title":"tls: device: fix out-of-bounds write in tls_append_frag()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80854","title":"usb: gadget: f_tcm: keep port count until LUN teardown completes","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80855","title":"fuse: fix invalidate lock leak on open O_TRUNC DAX failure","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80856","title":"fuse: fix invalidate lock leak on setattr writeback failure","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80861","title":"usb: xhci: bail out of setup if the controller is inaccessible","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.2,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80863","title":"RDMA/rxe: Fix OOB in free_rd_atomic_resources()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80864","title":"RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80866","title":"tipc: avoid busy looping in tipc_exit_net()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80872","title":"ALSA: hda/tas2781: Cancel async firmware request at unbind","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80888","title":"drm/vmwgfx: drop dma_buf reference on foreign-fd prime import","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80889","title":"can: isotp: fix timer drain order, wakeup handling and tx_gen ordering","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80890","title":"sctp: reject stale cookies with mismatched verification tags","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80891","title":"KVM: s390: pci: Validate AIBV and AISB before pinning guest pages","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80892","title":"erofs: cap LZMA stream pool size","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80893","title":"mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":2.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80902","title":"dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80904","title":"net/tls: Fail tls_sw_splice_read() after a failed async decrypt","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80905","title":"net: tap: fix wrong transport_header when sending VLAN-tagged frame","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80909","title":"drm/amdgpu: Reject UVD message with invalid number of h265 refs","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80910","title":"ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":3.3,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80912","title":"selinux: reject an unclaimed class value in security_get_classes()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-80913","title":"selinux: require every boolean value to be defined","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":4.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Linux","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-81349","title":"Azure HDInsight Ambari Elevation of Privilege Vulnerability","product":"Azure HDInsights","family":"Azure","impact":"Elevation of Privilege","severity":"Important","cvss":7.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81352","title":"Web Media Extensions Remote Code Execution Vulnerability","product":"Microsoft Windows Codecs Library","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81353","title":"HEIF Image Extensions Remote Code Execution Vulnerability","product":"Microsoft Windows Codecs Library","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81354","title":"Windows Hello Elevation of Privilege Vulnerability","product":"Windows Hello","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81355","title":"Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability","product":"Virtual Hard Disk (VHD) Miniport Driver","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81356","title":"Visual Studio Code Security Feature Bypass Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81357","title":"Visual Studio Code Security Feature Bypass Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81376","title":"Visual Studio Code Security Feature Bypass Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":9.6,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81377","title":"Visual Studio Code Tampering Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Tampering","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81378","title":"Visual Studio Code Security Feature Bypass Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81379","title":"Visual Studio Code Security Feature Bypass Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Security Feature Bypass","severity":"Important","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81380","title":"GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability","product":"GitHub Copilot and Visual Studio Code","family":"Developer Tools","impact":"Information Disclosure","severity":"Important","cvss":5.3,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81381","title":"GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability","product":"GitHub Copilot and Visual Studio Code","family":"Developer Tools","impact":"Information Disclosure","severity":"Important","cvss":6.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81383","title":"Visual Studio Code Information Disclosure Vulnerability","product":"Visual Studio Code","family":"Developer Tools","impact":"Information Disclosure","severity":"Important","cvss":7.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81385","title":"Microsoft Office Publisher Remote Code Execution Vulnerability","product":"Microsoft Office Publisher","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81386","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81387","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81388","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81389","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81390","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81391","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81392","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81393","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81394","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81395","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81396","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81397","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81398","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81399","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81400","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81401","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81947","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81948","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81949","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81950","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81951","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81952","title":"Microsoft Word Remote Code Execution Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81953","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81954","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81955","title":"Windows Graphics Component Remote Code Execution Vulnerability","product":"Microsoft Graphics Component","family":"Windows","impact":"Remote Code Execution","severity":"Critical","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81956","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81957","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81958","title":"Microsoft Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81959","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81960","title":"Microsoft Excel Remote Code Execution Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-81963","title":"Windows Update Stack Elevation of Privilege Vulnerability","product":"Windows Update Stack","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":true,"publiclyDisclosed":false,"exploitability":"Exploitation Detected","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-82208","title":"wolfSSL CA-cache hit overrides callback","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"curl","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-83498","title":"Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability","product":"Windows Virtualization-Based Security (VBS) Enclave","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83501","title":"Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability","product":"Windows Virtualization-Based Security (VBS) Enclave","family":"Windows","impact":"Information Disclosure","severity":"Critical","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation More Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83605","title":"xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-83607","title":"xmldom: Element name injection via createElement() bypasses requireWellFormed","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-83608","title":"xmldom: DocType `name` Injection Bypasses requireWellFormed","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-83610","title":"xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-83611","title":"xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-83613","title":"xmldom: Quadratic-time attribute deduplication","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-83614","title":"xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-83615","title":"xmldom: Quadratic-memory consumption","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-83616","title":"xmldom: Processing Instruction Target Injection Bypasses requireWellFormed","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-83619","title":"xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-83711","title":"Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability","product":"Microsoft Azure Active Directory B2C","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":10,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-83939","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","product":"Windows Secure Kernel Mode","family":"Windows","impact":"Elevation of Privilege","severity":"Critical","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83940","title":"Windows Device Association Service Elevation of Privilege Vulnerability","product":"Windows Device Association Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83941","title":"Entra ID Elevation of Privilege Vulnerability","product":"Entra ID","family":"Azure","impact":"Elevation of Privilege","severity":"Critical","cvss":9.9,"exploited":false,"publiclyDisclosed":false,"exploitability":"N/A","cna":"Microsoft","thirdParty":false,"customerActionRequired":false},{"cve":"CVE-2026-83942","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83948","title":"Microsoft Azure CLI Remote Code Execution Vulnerability","product":"Microsoft Azure CLI","family":"Azure","impact":"Remote Code Execution","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83949","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83951","title":"Microsoft Office Word Information Disclosure Vulnerability","product":"Microsoft Office Word","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83952","title":"Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","product":"Windows Resilient File System (ReFS)","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83954","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83955","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83967","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83968","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83969","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83970","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83971","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83972","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83973","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83974","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83975","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83976","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83977","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83978","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83979","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83980","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83981","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83982","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83983","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83985","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83986","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83987","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83988","title":"Windows Biometric Service Elevation of Privilege Vulnerability","product":"Windows Biometric Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83989","title":"Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability","product":"Windows Services for NFS ONCRPC XDR Driver","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83990","title":"Microsoft Graphics Component Elevation of Privilege Vulnerability","product":"Microsoft Graphics Component","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83991","title":"Windows Cloud Files Mini Filter Driver Tampering Vulnerability","product":"Windows Cloud Files Mini Filter Driver","family":"Windows","impact":"Tampering","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83992","title":"Windows Imaging Component Remote Code Execution Vulnerability","product":"Windows Imaging Component","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83995","title":"Windows NTFS Elevation of Privilege Vulnerability","product":"Windows NTFS","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83996","title":"Windows Error Reporting Elevation of Privilege Vulnerability","product":"Windows Error Reporting","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83997","title":"Windows Message Queuing Remote Code Execution Vulnerability","product":"Windows Message Queuing","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.1,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83998","title":"Remote Desktop Client Remote Code Execution Vulnerability","product":"Remote Desktop Client","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-83999","title":"Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability","product":"Windows Resilient File System (ReFS) Deduplication Service","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-84000","title":"Microsoft Graphics Component Remote Code Execution Vulnerability","product":"Microsoft Graphics Component","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-84001","title":"Windows Key Distribution Center Denial of Service Vulnerability","product":"Windows Key Distribution Center","family":"Windows","impact":"Denial of Service","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Unlikely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-84003","title":"Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability","product":"Microsoft Authentication Library (MSAL) for Node.js","family":"Azure","impact":"Spoofing","severity":"Important","cvss":7.4,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-84233","title":"Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84303","title":"gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84304","title":"gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84323","title":"Chromium: CVE-2026-84323 Missing authorization in FileSystem","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84324","title":"Chromium: CVE-2026-84324 Use after free in Proxy","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84325","title":"Chromium: CVE-2026-84325 Improper input validation in DataTransfer","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84326","title":"Chromium: CVE-2026-84326 Uninitialized resource in V8","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84327","title":"Chromium: CVE-2026-84327 Incorrect authorization in Autofill","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84328","title":"Chromium: CVE-2026-84328 Missing authorization in FileSystem","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84329","title":"Chromium: CVE-2026-84329 Confused deputy in CredentialProvider","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84331","title":"Chromium: CVE-2026-84331 Incorrect authorization in Actor","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84332","title":"Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84334","title":"Chromium: CVE-2026-84334 Incorrect authorization in Chromoting","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84335","title":"Chromium: CVE-2026-84335 Incorrect authorization in TabStrip","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84347","title":"Chromium: CVE-2026-84347 Use after free in WebRTC","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84348","title":"Chromium: CVE-2026-84348 Information leak in MediaCapture","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84349","title":"Chromium: CVE-2026-84349 Use after free in Browser","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84350","title":"Chromium: CVE-2026-84350 Use after free in TabStrip","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84351","title":"Chromium: CVE-2026-84351 Buffer overflow in GPU","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84353","title":"Chromium: CVE-2026-84353 Use after free in Shared Tab Groups","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84354","title":"Chromium: CVE-2026-84354 Incorrect authorization in FileSystem","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84355","title":"Chromium: CVE-2026-84355 Incorrect authorization in Navigation","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84356","title":"Chromium: CVE-2026-84356 UI misrepresentation in FullScreen","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84357","title":"Chromium: CVE-2026-84357 Improper input validation in Omnibox","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84358","title":"Chromium: CVE-2026-84358 Improper privilege management in Downloads","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84359","title":"Chromium: CVE-2026-84359 Information leak in Skia","product":"Microsoft Edge (Chromium-based)","family":"Browser","impact":"Unknown","severity":"Unknown","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"Chrome","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-84838","title":"Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"redhat","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-85062","title":"Colord: Slow rejection of oversized malformed color strings","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":null,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"GitHub_M","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-85091","title":"zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.4,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"VulnCheck","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-85360","title":"Windows Kernel Elevation of Privilege Vulnerability","product":"Windows Kernel","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-85393","title":"node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"VulnCheck","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-85396","title":"rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"VulnCheck","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-85504","title":"FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.","product":"Mariner","family":"Other","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-85505","title":"ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions).","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":7.5,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-85506","title":"ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).","product":"Mariner","family":"Other","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-85507","title":"ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).","product":"Mariner","family":"Other","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-85508","title":"ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).","product":"Mariner","family":"Other","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-85509","title":"FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.","product":"Mariner","family":"Other","impact":"Unknown","severity":"Critical","cvss":9.8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-85875","title":"Microsoft Office Excel Information Disclosure Vulnerability","product":"Microsoft Office Excel","family":"Microsoft Office","impact":"Information Disclosure","severity":"Important","cvss":5.5,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-85877","title":"Windows Print Spooler Remote Code Execution Vulnerability","product":"Windows Print Spooler Components","family":"Windows","impact":"Remote Code Execution","severity":"Important","cvss":8.8,"exploited":false,"publiclyDisclosed":false,"exploitability":"Exploitation Less Likely","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-85880","title":"Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability","product":"Windows ALPC","family":"Windows","impact":"Elevation of Privilege","severity":"Important","cvss":7.8,"exploited":true,"publiclyDisclosed":false,"exploitability":"Exploitation Detected","cna":"Microsoft","thirdParty":false,"customerActionRequired":true},{"cve":"CVE-2026-86090","title":"ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"VulnCheck","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-86091","title":"ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":7.1,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"VulnCheck","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-86137","title":"In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":2.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-86138","title":"In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-86139","title":"In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-86140","title":"In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":8,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-86141","title":"xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.","product":"Mariner","family":"Other","impact":"Unknown","severity":"Low","cvss":2.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-86142","title":"In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-86143","title":"In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":6.9,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-86144","title":"In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entity injection, SSRF, or a denial of service (e.g., for an attacker-controlled internet resource that is intentionally slow).","product":"Mariner","family":"Other","impact":"Unknown","severity":"Moderate","cvss":5.6,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true},{"cve":"CVE-2026-86145","title":"PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).","product":"Mariner","family":"Other","impact":"Unknown","severity":"Important","cvss":8.2,"exploited":false,"publiclyDisclosed":false,"exploitability":null,"cna":"mitre","thirdParty":true,"customerActionRequired":true}]}