Skip to content
Appaloosa Scout
Language selector
fr en

Windows · Fixed build · All Windows builds

KB5131087

10.0.22631.7711

Windows 11 23H2

MSRC advisory

Windows build 10.0.22631.7711, released on 2026-11-10, fixes 574 CVE, deployed across 1 SKUs.

Published on
2026-11-10
SKUs covered
1
CVEs fixed
574

37 critical · 485 high

CISA KEV
0

Windows SKUs covered by this build

The SKUs below share this MSRC build number. Deploying the corresponding KB secures all of them at once.

CVEs fixed by this build

CVE
CVE-2026-96157
CRITICAL 9.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-96078
CRITICAL 9.8

Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

CVE-2026-96067
CRITICAL 9.8

Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

CVE-2026-95901
CRITICAL 9.8

Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

CVE-2026-95882
CRITICAL 9.8

Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

CVE-2026-88218
CRITICAL 9.8

Double free in Windows DNS allows an unauthorized attacker to execute code over a network.

CVE-2026-85844
CRITICAL 9.8

Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-119958
CRITICAL 9.8

Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVE-2026-116928
CRITICAL 9.8

Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

CVE-2026-112967
CRITICAL 9.8

Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.

CVE-2026-95962
HIGH 9.0

Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability

CVE-2026-96010
HIGH 8.8

Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.

CVE-2026-95996
HIGH 8.8

Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-124226
HIGH 8.8

Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

CVE-2026-105518
HIGH 8.8

Windows iSCSI Remote Code Execution Vulnerability

CVE-2026-105542
HIGH 8.8

Windows NTFS Remote Code Execution Vulnerability

CVE-2026-105581
HIGH 8.8

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-108401
HIGH 8.8

Remote Desktop Services Remote Code Execution Vulnerability

CVE-2026-108411
HIGH 8.8

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2026-112762
HIGH 8.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-113760
HIGH 8.8

Windows XWizard Framework Elevation of Privilege Vulnerability

CVE-2026-113814
HIGH 8.8

Windows Storage Spaces Controller Remote Code Execution Vulnerability

CVE-2026-118141
HIGH 8.8

Windows Client for NFS Remote Code Execution Vulnerability

CVE-2026-118146
CRITICAL 8.8

Windows Active Directory Domain Services Remote Code Execution Vulnerability

CVE-2026-119392
HIGH 8.8

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-119824
HIGH 8.8

Remote Desktop Client Tampering Vulnerability

CVE-2026-119839
HIGH 8.8

Windows Remote Desktop Client Elevation of Privilege Vulnerability

CVE-2026-119862
HIGH 8.8

Windows Input System Elevation of Privilege Vulnerability

CVE-2026-119881
HIGH 8.8

Microsoft XPS Document Converter Elevation of Privilege Vulnerability

CVE-2026-119908
HIGH 8.8

Windows Storage Spaces Controller Remote Code Execution Vulnerability

CVE-2026-119916
HIGH 8.8

Windows Input System Elevation of Privilege Vulnerability

CVE-2026-119925
HIGH 8.8

Windows Text Services Framework Elevation of Privilege Vulnerability

CVE-2026-119934
HIGH 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-119950
HIGH 8.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-119969
CRITICAL 8.8

Graphic Fonts Remote Code Execution Vulnerability

CVE-2026-122171
HIGH 8.8

Microsoft XPS Document Converter Remote Code Execution Vulnerability

CVE-2026-122176
HIGH 8.8

Windows SMB Remote Code Execution Vulnerability

CVE-2026-122475
HIGH 8.8

Windows Storage Spaces Controller Remote Code Execution Vulnerability

CVE-2026-125136
CRITICAL 8.8

Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability

CVE-2026-88222
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability

CVE-2026-88229
HIGH 8.8

Windows Media Player Remote Code Execution Vulnerability

CVE-2026-88249
HIGH 8.8

Windows Client for NFS Remote Code Execution Vulnerability

CVE-2026-95975
HIGH 8.8

Windows Performance Counters Remote Code Execution Vulnerability

CVE-2026-96164
HIGH 8.8

Windows Imaging Component Remote Code Execution Vulnerability

CVE-2026-95885
HIGH 8.1

Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-102219
HIGH 8.1

Windows Modern Device Management (MDM) Remote Code Execution Vulnerability

CVE-2026-109459
CRITICAL 8.1

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

CVE-2026-113862
CRITICAL 8.1

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

CVE-2026-116710
CRITICAL 8.1

Windows Message Queuing Remote Code Execution Vulnerability

CVE-2026-118737
CRITICAL 8.1

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2026-119945
HIGH 8.1

Windows Modern Device Management (MDM) Remote Code Execution Vulnerability

CVE-2026-119952
CRITICAL 8.1

Windows Schannel Remote Code Execution Vulnerability

CVE-2026-119961
CRITICAL 8.1

Windows Internet Information Services Remote Code Execution Vulnerability

CVE-2026-119962
CRITICAL 8.1

Windows CredSSP Remote Code Execution Vulnerability

CVE-2026-119963
CRITICAL 8.1

Windows Message Queuing Remote Code Execution Vulnerability

CVE-2026-119964
CRITICAL 8.1

Windows Message Queuing Remote Code Execution Vulnerability

CVE-2026-119967
CRITICAL 8.1

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

CVE-2026-95956
HIGH 8.1

Windows eSCL Scanner Remote Code Execution Vulnerability

CVE-2026-88240
HIGH 8.0

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-88187
HIGH 8.0

Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-123387
HIGH 8.0

Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an authorized attacker to elevate privil…

CVE-2026-122164
HIGH 8.0

Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

CVE-2026-97013
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-96184
HIGH 7.8

Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-96172
HIGH 7.8

No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96174
HIGH 7.8

Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96175
HIGH 7.8

Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96160
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96162
HIGH 7.8

Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally.

CVE-2026-96152
HIGH 7.8

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96126
HIGH 7.8

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96117
HIGH 7.8

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

CVE-2026-96122
HIGH 7.8

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96102
HIGH 7.8

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-96103
HIGH 7.8

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96085
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96084
HIGH 7.8

Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.

CVE-2026-96074
HIGH 7.8

Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96076
HIGH 7.8

Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.

CVE-2026-96062
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96066
HIGH 7.8

Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96056
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96057
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96060
HIGH 7.8

Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96052
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96053
HIGH 7.8

Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileg…

CVE-2026-96055
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96036
HIGH 7.8

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96037
HIGH 7.8

Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96038
HIGH 7.8

Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96028
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96029
HIGH 7.8

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96031
HIGH 7.8

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96023
HIGH 7.8

Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.

CVE-2026-96005
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95997
HIGH 7.8

Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

CVE-2026-95999
HIGH 7.8

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95991
HIGH 7.8

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95983
HIGH 7.8

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95965
HIGH 7.8

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95963
HIGH 7.8

Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

CVE-2026-95953
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95947
HIGH 7.8

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of…

CVE-2026-95948
HIGH 7.8

Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95951
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-95934
HIGH 7.8

Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

CVE-2026-95935
HIGH 7.8

Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95942
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95920
HIGH 7.8

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-95932
HIGH 7.8

Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95933
HIGH 7.8

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-95909
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95898
HIGH 7.8

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.

CVE-2026-95902
HIGH 7.8

Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95894
HIGH 7.8

Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-95895
HIGH 7.8

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95881
HIGH 7.8

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-95872
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95874
HIGH 7.8

Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally.

CVE-2026-95879
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-94527
HIGH 7.8

Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

CVE-2026-94531
HIGH 7.8

Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.

CVE-2026-88241
HIGH 7.8

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88233
HIGH 7.8

Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-88235
HIGH 7.8

Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-88238
HIGH 7.8

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-88230
HIGH 7.8

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

CVE-2026-88227
HIGH 7.8

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88213
HIGH 7.8

Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85942
HIGH 7.8

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-85801
HIGH 7.8

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83563
HIGH 7.8

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

CVE-2026-125137
HIGH 7.8

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-123388
HIGH 7.8

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-122984
HIGH 7.8

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-122183
HIGH 7.8

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-122172
HIGH 7.8

Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.

CVE-2026-122165
HIGH 7.8

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

CVE-2026-122166
HIGH 7.8

Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-122168
HIGH 7.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-121673
HIGH 7.8

Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-118137
HIGH 7.8

Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally.

CVE-2026-113843
HIGH 7.8

Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-100223
HIGH 7.8

Windows NTFS Elevation of Privilege Vulnerability

CVE-2026-105028
HIGH 7.8

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-105501
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-105503
HIGH 7.8

Windows Management Instrumentation Elevation of Privilege Vulnerability

CVE-2026-105505
HIGH 7.8

Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

CVE-2026-105507
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-105524
HIGH 7.8

Windows Management Instrumentation Elevation of Privilege Vulnerability

CVE-2026-105528
HIGH 7.8

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-105532
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-105541
HIGH 7.8

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-105543
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-105569
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-105575
HIGH 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-105580
HIGH 7.8

Windows Management Instrumentation Remote Code Execution Vulnerability

CVE-2026-108403
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-108405
HIGH 7.8

Windows CD-ROM Driver Elevation of Privilege Vulnerability

CVE-2026-108407
HIGH 7.8

Windows GDI Elevation of Privilege Vulnerability

CVE-2026-108412
HIGH 7.8

Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability

CVE-2026-109473
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-112743
HIGH 7.8

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-112751
HIGH 7.8

Windows Remote Assistance Elevation of Privilege Vulnerability

CVE-2026-112752
HIGH 7.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112758
HIGH 7.8

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2026-112760
HIGH 7.8

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2026-112794
HIGH 7.8

Windows Smart Card Elevation of Privilege Vulnerability

CVE-2026-112799
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-112801
HIGH 7.8

Windows eSCL Scanner Elevation of Privilege Vulnerability

CVE-2026-112802
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-112811
HIGH 7.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112978
HIGH 7.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112981
HIGH 7.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-113748
HIGH 7.8

Software Protection Platform (SPP) Elevation of Privilege Vulnerability

CVE-2026-113758
HIGH 7.8

Windows Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-113767
HIGH 7.8

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVE-2026-113847
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-113848
HIGH 7.8

Windows NTFS Remote Code Execution Vulnerability

CVE-2026-113856
CRITICAL 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-113865
CRITICAL 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-116714
HIGH 7.8

Windows AppX Deployment Service Elevation of Privilege Vulnerability

CVE-2026-118126
HIGH 7.8

Windows Message Queuing Elevation of Privilege Vulnerability

CVE-2026-118138
HIGH 7.8

Windows Client for NFS Elevation of Privilege Vulnerability

CVE-2026-118142
HIGH 7.8

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

CVE-2026-118220
HIGH 7.8

Windows Multiple Provider Router Elevation of Privilege Vulnerability

CVE-2026-119382
CRITICAL 7.8

Windows TPM Elevation of Privilege Vulnerability

CVE-2026-119390
HIGH 7.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-119391
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-119393
HIGH 7.8

Windows Credential Manager Elevation of Privilege Vulnerability

CVE-2026-119816
HIGH 7.8

Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability

CVE-2026-119817
HIGH 7.8

Windows Shell Elevation of Privilege Vulnerability

CVE-2026-119818
HIGH 7.8

Windows Text Services Framework Elevation of Privilege Vulnerability

CVE-2026-119821
HIGH 7.8

Windows Network Connection Broker Elevation of Privilege Vulnerability

CVE-2026-119826
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-119834
HIGH 7.8

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVE-2026-119846
HIGH 7.8

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVE-2026-119847
HIGH 7.8

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2026-119853
HIGH 7.8

Remote Access API Elevation of Privilege Vulnerability

CVE-2026-119886
HIGH 7.8

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-119892
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119899
HIGH 7.8

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-119903
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119904
HIGH 7.8

Microsoft Windows Speech Elevation of Privilege Vulnerability

CVE-2026-119907
HIGH 7.8

Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability

CVE-2026-119917
HIGH 7.8

Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability

CVE-2026-119929
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119933
HIGH 7.8

Windows NTFS Elevation of Privilege Vulnerability

CVE-2026-119939
HIGH 7.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-119941
HIGH 7.8

Volume Shadow Copy Elevation of Privilege Vulnerability

CVE-2026-119953
HIGH 7.8

Windows DNS Elevation of Privilege Vulnerability

CVE-2026-119954
HIGH 7.8

Microsoft Windows Search Component Elevation of Privilege Vulnerability

CVE-2026-124225
HIGH 7.8

Windows PowerShell Remote Code Execution Vulnerability

CVE-2026-95891
HIGH 7.8

Microsoft DirectMusic Remote Code Execution Vulnerability

CVE-2026-95896
HIGH 7.8

Microsoft DirectMusic Remote Code Execution Vulnerability

CVE-2026-97002
HIGH 7.5

Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.

CVE-2026-96176
HIGH 7.5

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-96077
HIGH 7.5

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

CVE-2026-88236
HIGH 7.5

Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network.

CVE-2026-70240
HIGH 7.5

Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.

CVE-2026-122177
HIGH 7.5

Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-122169
HIGH 7.5

Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally.

CVE-2026-121680
HIGH 7.5

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-105512
HIGH 7.5

Microsoft QUIC Denial of Service Vulnerability

CVE-2026-105515
HIGH 7.5

Windows Message Queuing Denial of Service Vulnerability

CVE-2026-105551
HIGH 7.5

Windows NetBIOS Elevation of Privilege Vulnerability

CVE-2026-105558
HIGH 7.5

Windows Deployment Services Remote Code Execution Vulnerability

CVE-2026-105561
HIGH 7.5

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

CVE-2026-105578
HIGH 7.5

Microsoft JScript Remote Code Execution Vulnerability

CVE-2026-112793
HIGH 7.5

Windows Event Collector Service Elevation of Privilege Vulnerability

CVE-2026-112966
HIGH 7.5

Windows Security Account Manager Denial of Service Vulnerability

CVE-2026-112972
HIGH 7.5

Windows SMBv3 Server Remote Code Execution Vulnerability

CVE-2026-112985
HIGH 7.5

Windows JScript Remote Code Execution Vulnerability

CVE-2026-113749
CRITICAL 7.5

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

CVE-2026-113752
CRITICAL 7.5

Windows Print Spooler Components Remote Code Execution Vulnerability

CVE-2026-113768
HIGH 7.5

Windows Performance Counters Remote Code Execution Vulnerability

CVE-2026-113825
CRITICAL 7.5

Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability

CVE-2026-113861
CRITICAL 7.5

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-116698
HIGH 7.5

Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability

CVE-2026-116706
HIGH 7.5

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

CVE-2026-118145
CRITICAL 7.5

Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability

CVE-2026-118148
CRITICAL 7.5

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2026-118735
HIGH 7.5

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2026-119837
HIGH 7.5

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-119858
HIGH 7.5

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-119880
HIGH 7.5

Microsoft XPS Document Converter Remote Code Execution Vulnerability

CVE-2026-119932
HIGH 7.5

Windows Remote Desktop Denial of Service Vulnerability

CVE-2026-119938
HIGH 7.5

Windows Shell Remote Code Execution Vulnerability

CVE-2026-119944
HIGH 7.5

Windows Mobile Device Management Elevation of Privilege Vulnerability

CVE-2026-119947
CRITICAL 7.5

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-119948
HIGH 7.5

Windows Active Directory Remote Code Execution Vulnerability

CVE-2026-119966
CRITICAL 7.5

Windows Graphics Kernel Elevation of Privilege Vulnerability

CVE-2026-122163
HIGH 7.5

Windows Image Acquisition Remote Code Execution Vulnerability

CVE-2026-125134
CRITICAL 7.5

Windows Function Discovery Resource Publication Remote Code Execution Vulnerability

CVE-2026-88212
HIGH 7.5

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

CVE-2026-88244
HIGH 7.5

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

CVE-2026-95964
HIGH 7.5

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-96081
HIGH 7.5

Windows Rich Text Edit Control Remote Code Execution Vulnerability

CVE-2026-96993
HIGH 7.5

Windows Performance Monitor Remote Code Execution Vulnerability

CVE-2026-119900
HIGH 7.3

Windows NTFS Elevation of Privilege Vulnerability

CVE-2026-112973
HIGH 7.1

Windows Kernel Security Feature Bypass Vulnerability

CVE-2026-119988
HIGH 7.1

Windows SMB Remote Code Execution Vulnerability

CVE-2026-96994
HIGH 7.0

Use after free in Winsock allows an authorized attacker to elevate privileges locally.

CVE-2026-96978
HIGH 7.0

Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.

CVE-2026-96971
HIGH 7.0

Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

CVE-2026-96973
HIGH 7.0

Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96969
HIGH 7.0

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-96171
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96158
HIGH 7.0

Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96168
HIGH 7.0

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96153
HIGH 7.0

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-96155
HIGH 7.0

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96139
HIGH 7.0

Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-96124
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96107
HIGH 7.0

Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96088
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho…

CVE-2026-96075
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate pr…

CVE-2026-96061
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96072
HIGH 7.0

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

CVE-2026-96051
HIGH 7.0

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96042
HIGH 7.0

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96043
HIGH 7.0

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96035
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96027
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96019
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi…

CVE-2026-96007
HIGH 7.0

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-95987
HIGH 7.0

Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-95989
HIGH 7.0

Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-95966
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95968
HIGH 7.0

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-95971
HIGH 7.0

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95973
HIGH 7.0

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95974
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95961
HIGH 7.0

Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95950
HIGH 7.0

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95938
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95922
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95923
HIGH 7.0

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-95906
HIGH 7.0

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95888
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95876
HIGH 7.0

Use after free in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.

CVE-2026-95871
HIGH 7.0

Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-94525
HIGH 7.0

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of…

CVE-2026-94529
HIGH 7.0

Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-94514
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg…

CVE-2026-94522
HIGH 7.0

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-88242
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-88237
HIGH 7.0

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-88228
HIGH 7.0

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88221
HIGH 7.0

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85862
HIGH 7.0

Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-70120
HIGH 7.0

Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70231
HIGH 7.0

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-124224
HIGH 7.0

Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally.

CVE-2026-123389
HIGH 7.0

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

CVE-2026-122182
HIGH 7.0

Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.

CVE-2026-122174
HIGH 7.0

Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-122179
HIGH 7.0

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

CVE-2026-122170
HIGH 7.0

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-121670
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate …

CVE-2026-121671
HIGH 7.0

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-103571
HIGH 7.0

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2026-105017
HIGH 7.0

Volume Shadow Copy Elevation of Privilege Vulnerability

CVE-2026-105024
HIGH 7.0

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-105504
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-105510
HIGH 7.0

Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability

CVE-2026-105511
HIGH 7.0

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

CVE-2026-105513
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-105522
HIGH 7.0

Winlogon Elevation of Privilege Vulnerability

CVE-2026-105525
HIGH 7.0

Windows Network Connection Broker Elevation of Privilege Vulnerability

CVE-2026-105526
HIGH 7.0

Winsock Elevation of Privilege Vulnerability

CVE-2026-105529
HIGH 7.0

Windows Storage Elevation of Privilege Vulnerability

CVE-2026-105533
HIGH 7.0

Windows COM Elevation of Privilege Vulnerability

CVE-2026-105540
HIGH 7.0

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2026-105546
HIGH 7.0

Windows Management Instrumentation Elevation of Privilege Vulnerability

CVE-2026-105547
HIGH 7.0

Windows Setup and Deployment Elevation of Privilege Vulnerability

CVE-2026-105553
HIGH 7.0

Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability

CVE-2026-105554
HIGH 7.0

Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

CVE-2026-105566
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-105582
HIGH 7.0

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-105583
HIGH 7.0

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-105586
HIGH 7.0

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

CVE-2026-105587
HIGH 7.0

Windows OLE DB Elevation of Privilege Vulnerability

CVE-2026-105589
HIGH 7.0

Windows Wireless Networking Elevation of Privilege Vulnerability

CVE-2026-108406
HIGH 7.0

Windows Network Connection Broker Elevation of Privilege Vulnerability

CVE-2026-108413
HIGH 7.0

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-108414
HIGH 7.0

Windows Projected File System Filter Driver Elevation of Privilege Vulnerability

CVE-2026-112756
HIGH 7.0

Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability

CVE-2026-112759
HIGH 7.0

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2026-112761
HIGH 7.0

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

CVE-2026-112763
HIGH 7.0

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-112764
HIGH 7.0

Windows USB Driver Elevation of Privilege Vulnerability

CVE-2026-112765
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112766
HIGH 7.0

Windows exFAT File System Elevation of Privilege Vulnerability

CVE-2026-112790
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-112791
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112792
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112796
HIGH 7.0

Windows Event Collector Service Elevation of Privilege Vulnerability

CVE-2026-112797
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112798
HIGH 7.0

Windows NetBIOS Elevation of Privilege Vulnerability

CVE-2026-112800
HIGH 7.0

Windows Diagnostic Policy Service Elevation of Privilege Vulnerability

CVE-2026-112804
HIGH 7.0

Windows exFAT File System Elevation of Privilege Vulnerability

CVE-2026-112810
HIGH 7.0

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-112812
HIGH 7.0

Windows SMB Client Elevation of Privilege Vulnerability

CVE-2026-112968
HIGH 7.0

Windows COM Elevation of Privilege Vulnerability

CVE-2026-112976
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112986
HIGH 7.0

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-112987
HIGH 7.0

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

CVE-2026-113750
HIGH 7.0

Windows Device Inventory Elevation of Privilege Vulnerability

CVE-2026-113751
HIGH 7.0

Windows Fast FAT Driver Elevation of Privilege Vulnerability

CVE-2026-113755
HIGH 7.0

Windows Filter Manager Elevation of Privilege Vulnerability

CVE-2026-113762
HIGH 7.0

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

CVE-2026-113769
HIGH 7.0

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVE-2026-113770
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-113820
HIGH 7.0

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

CVE-2026-113842
HIGH 7.0

Windows Security Center Elevation of Privilege Vulnerability

CVE-2026-113860
CRITICAL 7.0

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-116707
HIGH 7.0

Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability

CVE-2026-118123
HIGH 7.0

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

CVE-2026-118124
HIGH 7.0

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

CVE-2026-118125
HIGH 7.0

Windows Message Queuing Elevation of Privilege Vulnerability

CVE-2026-119386
HIGH 7.0

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVE-2026-119387
HIGH 7.0

Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability

CVE-2026-119388
HIGH 7.0

Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability

CVE-2026-119389
HIGH 7.0

Windows Storage Elevation of Privilege Vulnerability

CVE-2026-119397
HIGH 7.0

Windows Kernel Transaction Manager Elevation of Privilege Vulnerability

CVE-2026-119398
HIGH 7.0

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119399
HIGH 7.0

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119401
HIGH 7.0

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

CVE-2026-119402
HIGH 7.0

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

CVE-2026-119403
HIGH 7.0

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

CVE-2026-119405
HIGH 7.0

Windows Backup Engine Elevation of Privilege Vulnerability

CVE-2026-119822
HIGH 7.0

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2026-119827
HIGH 7.0

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-119831
HIGH 7.0

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119833
HIGH 7.0

Windows Message Queuing Elevation of Privilege Vulnerability

CVE-2026-119835
HIGH 7.0

Windows Smart Card Elevation of Privilege Vulnerability

CVE-2026-119844
HIGH 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-119849
HIGH 7.0

Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability

CVE-2026-119851
HIGH 7.0

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-119860
HIGH 7.0

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

CVE-2026-119861
HIGH 7.0

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

CVE-2026-119866
HIGH 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-119870
HIGH 7.0

Windows SMB Client Elevation of Privilege Vulnerability

CVE-2026-119873
HIGH 7.0

Windows NetBIOS Elevation of Privilege Vulnerability

CVE-2026-119874
HIGH 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-119876
HIGH 7.0

Windows USB Scanner Driver Elevation of Privilege Vulnerability

CVE-2026-119888
HIGH 7.0

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-119894
HIGH 7.0

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-119895
HIGH 7.0

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-119898
HIGH 7.0

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2026-119913
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-119919
HIGH 7.0

Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability

CVE-2026-119921
HIGH 7.0

Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability

CVE-2026-119928
HIGH 7.0

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2026-119931
HIGH 7.0

Windows Text Services Framework Elevation of Privilege Vulnerability

CVE-2026-119974
HIGH 7.0

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-119992
HIGH 7.0

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2026-96054
HIGH 7.0

Microsoft Color Management Remote Code Execution Vulnerability

CVE-2026-96982
MEDIUM 6.8

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96979
MEDIUM 6.8

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96974
MEDIUM 6.8

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-95905
MEDIUM 6.8

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-125135
MEDIUM 6.8

Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-122173
MEDIUM 6.8

Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-122167
MEDIUM 6.8

Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-108404
HIGH 6.8

Windows CD-ROM Driver Remote Code Execution Vulnerability

CVE-2026-112755
HIGH 6.8

Windows RNDIS Elevation of Privilege Vulnerability

CVE-2026-118143
HIGH 6.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-119823
HIGH 6.8

Windows Storport Miniport Driver Remote Code Execution Vulnerability

CVE-2026-119829
HIGH 6.8

Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

CVE-2026-119830
HIGH 6.8

Windows Storport Miniport Driver Elevation of Privilege Vulnerability

CVE-2026-119884
HIGH 6.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-119885
HIGH 6.8

Windows Storport Miniport Driver Elevation of Privilege Vulnerability

CVE-2026-119918
HIGH 6.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-119935
HIGH 6.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-95910
MEDIUM 6.7

Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.

CVE-2026-112980
HIGH 6.7

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-119852
HIGH 6.7

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119912
HIGH 6.7

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-119914
HIGH 6.7

Windows Setup and Deployment Elevation of Privilege Vulnerability

CVE-2026-95889
MEDIUM 6.6

Untrusted pointer dereference in Windows Storage allows an authorized attacker to elevate privileges with a physical attack.

CVE-2026-105018
HIGH 6.6

Windows Partition Management Driver Elevation of Privilege Vulnerability

CVE-2026-112969
HIGH 6.6

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-112984
HIGH 6.6

Windows USB Video Driver Elevation of Privilege Vulnerability

CVE-2026-113817
HIGH 6.6

Windows Devices Human Interface Elevation of Privilege Vulnerability

CVE-2026-116700
HIGH 6.6

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-118144
HIGH 6.6

Windows Smart Card Elevation of Privilege Vulnerability

CVE-2026-119383
HIGH 6.6

Windows Smart Card Elevation of Privilege Vulnerability

CVE-2026-119394
HIGH 6.6

Windows Enhanced Storage Remote Code Execution Vulnerability

CVE-2026-119937
HIGH 6.6

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2026-96086
MEDIUM 6.5

Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.

CVE-2026-96082
MEDIUM 6.5

Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

CVE-2026-96018
MEDIUM 6.5

Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally.

CVE-2026-105559
HIGH 6.5

Windows Active Directory Denial of Service Vulnerability

CVE-2026-105568
HIGH 6.5

Windows Active Directory Domain Services Denial of Service Vulnerability

CVE-2026-108417
HIGH 6.5

Windows Remote Desktop Client Information Disclosure Vulnerability

CVE-2026-108418
HIGH 6.5

Windows Remote Desktop Client Information Disclosure Vulnerability

CVE-2026-108419
HIGH 6.5

Windows Remote Desktop Client Information Disclosure Vulnerability

CVE-2026-108424
HIGH 6.5

Windows GDI Information Disclosure Vulnerability

CVE-2026-112795
HIGH 6.5

Windows Security Account Manager Denial of Service Vulnerability

CVE-2026-112807
HIGH 6.5

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

CVE-2026-112808
HIGH 6.5

Windows Print Spooler Components Information Disclosure Vulnerability

CVE-2026-116699
HIGH 6.5

Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability

CVE-2026-119396
HIGH 6.5

Windows Remote Access API Tampering Vulnerability

CVE-2026-119887
HIGH 6.5

Windows Installer Information Disclosure Vulnerability

CVE-2026-119889
HIGH 6.5

ActiveSyncProvider Information Disclosure Vulnerability

CVE-2026-119940
HIGH 6.5

Windows Kerberos Denial of Service Vulnerability

CVE-2026-96992
MEDIUM 6.4

Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96981
MEDIUM 6.4

Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-88215
MEDIUM 6.4

Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.

CVE-2026-113864
CRITICAL 6.4

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-119871
HIGH 6.4

Windows IP Translation Configuration Service Elevation of Privilege Vulnerability

CVE-2026-119965
HIGH 6.4

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-113763
HIGH 6.3

Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability

CVE-2026-119840
HIGH 6.3

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-112757
HIGH 6.0

Windows Secure Kernel Mode Information Disclosure Vulnerability

CVE-2026-119955
HIGH 6.0

Windows Hyper-V Denial of Service Vulnerability

CVE-2026-95913
MEDIUM 5.9

Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network.

CVE-2026-122474
MEDIUM 5.9

Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a netwo…

CVE-2026-119832
MEDIUM 5.9

Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack.

CVE-2026-116697
HIGH 5.9

Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability

CVE-2026-119404
HIGH 5.9

Windows Client for NFS Security Feature Bypass Vulnerability

CVE-2026-119909
HIGH 5.9

Windows Internet Information Services Denial of Service Vulnerability

CVE-2026-119936
HIGH 5.9

Windows Internet Information Services Denial of Service Vulnerability

CVE-2026-119946
HIGH 5.9

HTTP.sys Information Disclosure Vulnerability

CVE-2026-119972
HIGH 5.9

Remote Procedure Call Denial of Service Vulnerability

CVE-2026-88231
MEDIUM 5.7

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network.

CVE-2026-88211
MEDIUM 5.7

Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network.

CVE-2026-96150
MEDIUM 5.6

Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.

CVE-2026-96022
MEDIUM 5.6

Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.

CVE-2026-96989
MEDIUM 5.5

Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.

CVE-2026-96156
MEDIUM 5.5

Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.

CVE-2026-96133
MEDIUM 5.5

Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-96101
MEDIUM 5.5

Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information l…

CVE-2026-96110
MEDIUM 5.5

Use after free in Windows OLE allows an authorized attacker to disclose information locally.

CVE-2026-96059
MEDIUM 5.5

Use after free in HID class driver allows an authorized attacker to disclose information locally.

CVE-2026-96041
MEDIUM 5.5

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.

CVE-2026-96001
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information l…

CVE-2026-95977
MEDIUM 5.5

Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally.

CVE-2026-95944
MEDIUM 5.5

Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally.

CVE-2026-95946
MEDIUM 5.5

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-95908
MEDIUM 5.5

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information locally.

CVE-2026-95893
MEDIUM 5.5

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-94517
MEDIUM 5.5

Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.

CVE-2026-88247
MEDIUM 5.5

Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.

CVE-2026-88220
MEDIUM 5.5

Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.

CVE-2026-88217
MEDIUM 5.5

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-122297
MEDIUM 5.5

Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.

CVE-2026-113757
MEDIUM 5.5

Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.

CVE-2026-112803
MEDIUM 5.5

Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.

CVE-2026-102868
HIGH 5.5

Windows Shell Information Disclosure Vulnerability

CVE-2026-105527
HIGH 5.5

Windows Encrypting File System (EFS) Denial of Service Vulnerability

CVE-2026-105530
HIGH 5.5

Windows System Events Broker Information Disclosure Vulnerability

CVE-2026-105531
HIGH 5.5

Windows Print Spooler Components Information Disclosure Vulnerability

CVE-2026-105537
HIGH 5.5

Mailslot File System Information Disclosure Vulnerability

CVE-2026-105552
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2026-105584
HIGH 5.5

Windows Inventory Backup Information Disclosure Vulnerability

CVE-2026-108408
HIGH 5.5

Windows Telephony Service Information Disclosure Vulnerability

CVE-2026-108409
HIGH 5.5

Windows Overlay Filter Information Disclosure Vulnerability

CVE-2026-108410
HIGH 5.5

Windows Management Instrumentation Information Disclosure Vulnerability

CVE-2026-112750
HIGH 5.5

Windows Overlay Filter Information Disclosure Vulnerability

CVE-2026-112754
HIGH 5.5

Microsoft Graphics Component Information Disclosure Vulnerability

CVE-2026-112814
HIGH 5.5

Windows Management Instrumentation Elevation of Privilege Vulnerability

CVE-2026-112965
HIGH 5.5

Windows Management Instrumentation Information Disclosure Vulnerability

CVE-2026-112974
HIGH 5.5

Microsoft Account Tampering Vulnerability

CVE-2026-112979
HIGH 5.5

Windows State Repository Service Tampering Vulnerability

CVE-2026-112982
HIGH 5.5

Microsoft Account Tampering Vulnerability

CVE-2026-112988
HIGH 5.5

Windows Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-113844
HIGH 5.5

Windows NTFS Tampering Vulnerability

CVE-2026-118736
HIGH 5.5

Windows Network File System Information Disclosure Vulnerability

CVE-2026-119825
HIGH 5.5

Win32k Information Disclosure Vulnerability

CVE-2026-119855
HIGH 5.5

Windows COM+ Event System Service Information Disclosure Vulnerability

CVE-2026-119856
HIGH 5.5

Win32k Information Disclosure Vulnerability

CVE-2026-119857
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2026-96983
MEDIUM 5.3

Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.

CVE-2026-96965
MEDIUM 5.3

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

CVE-2026-113756
MEDIUM 5.3

Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.

CVE-2026-105492
HIGH 5.3

Microsoft Remote Registry Service Denial of Service Vulnerability

CVE-2026-108402
HIGH 5.3

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

CVE-2026-112975
HIGH 5.3

Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability

CVE-2026-119848
HIGH 5.3

Windows Message Queuing Denial of Service Vulnerability

CVE-2026-119867
HIGH 5.3

Windows Installer Security Feature Bypass Vulnerability

CVE-2026-119882
HIGH 5.3

Windows Remote Desktop Services Information Disclosure Vulnerability

CVE-2026-119959
HIGH 5.3

Windows Hyper-V Spoofing Vulnerability

CVE-2026-105506
HIGH 5.0

Windows Shell Information Disclosure Vulnerability

CVE-2026-96144
MEDIUM 4.7

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-96093
MEDIUM 4.7

Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.

CVE-2026-96048
MEDIUM 4.7

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-113754
MEDIUM 4.7

Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.

CVE-2026-102200
HIGH 4.7

Windows NTFS Tampering Vulnerability

CVE-2026-105562
HIGH 4.7

Windows Container Manager Service Information Disclosure Vulnerability

CVE-2026-108423
HIGH 4.7

Windows WinHTTP Information Disclosure Vulnerability

CVE-2026-112789
HIGH 4.7

Windows Installer Information Disclosure Vulnerability

CVE-2026-112806
HIGH 4.7

Windows Print Spooler Components Information Disclosure Vulnerability

CVE-2026-112813
HIGH 4.7

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2026-112990
HIGH 4.7

Windows USB Video Driver Elevation of Privilege Vulnerability

CVE-2026-113764
HIGH 4.7

Windows Projected File System Information Disclosure Vulnerability

CVE-2026-113772
HIGH 4.7

Windows Redirected Drive Buffering Information Disclosure Vulnerability

CVE-2026-113815
HIGH 4.7

Microsoft PowerShell Security Feature Bypass Vulnerability

CVE-2026-119385
HIGH 4.7

Windows Hyper-V Denial of Service Vulnerability

CVE-2026-119836
HIGH 4.7

Windows Management Services Information Disclosure Vulnerability

CVE-2026-119838
HIGH 4.7

Windows Installer Information Disclosure Vulnerability

CVE-2026-119841
HIGH 4.7

Windows Graphics Kernel Information Disclosure Vulnerability

CVE-2026-119910
HIGH 4.7

Win32k Information Disclosure Vulnerability

CVE-2026-119942
HIGH 4.7

HTTP.sys Information Disclosure Vulnerability

CVE-2026-96058
MEDIUM 4.6

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-95998
MEDIUM 4.4

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform tampering locally.

CVE-2026-85907
MEDIUM 4.4

Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

CVE-2026-105549
HIGH 4.3

Windows Smart Card Information Disclosure Vulnerability

CVE-2026-113816
HIGH 4.1

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability

CVE-2026-113821
HIGH 4.1

Microsoft Windows SCSI Class System File Information Disclosure Vulnerability

CVE-2026-119875
HIGH 4.0

Windows Storport Miniport Driver Information Disclosure Vulnerability

CVE-2026-113766
HIGH 3.3

Windows Language Experience Service Tampering Vulnerability

Rolling out build 10.0.22631.7711 across your fleet?

Appaloosa pushes Windows updates, apps and policies from one console.

See Windows MDM