Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

Windows · Build corrective · Tous les builds Windows

KB5131080

10.0.26100.33822

Windows Server 2025

Advisory MSRC

La build Windows 10.0.26100.33822, publiée le 2026-11-10, corrige 627 CVE, déployée sur 2 SKU.

Publiée le
2026-11-10
SKU couvertes
2
CVE corrigées
627

41 critique · 516 élevé

KEV CISA
0

SKU Windows couvertes par cette build

Les SKU ci-dessous partagent ce numéro de build MSRC. Pousser la KB correspondante les sécurise toutes simultanément.

CVE corrigées par cette build

CVE
CVE-2026-96157
CRITICAL 9.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-96078
CRITICAL 9.8

Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

CVE-2026-96067
CRITICAL 9.8

Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

CVE-2026-95901
CRITICAL 9.8

Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

CVE-2026-95882
CRITICAL 9.8

Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

CVE-2026-88243
CRITICAL 9.8

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88234
CRITICAL 9.8

Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-88218
CRITICAL 9.8

Double free in Windows DNS allows an unauthorized attacker to execute code over a network.

CVE-2026-85844
CRITICAL 9.8

Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-119958
CRITICAL 9.8

Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVE-2026-116928
CRITICAL 9.8

Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

CVE-2026-95962
HIGH 9.0

Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability

CVE-2026-96010
HIGH 8.8

Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.

CVE-2026-95996
HIGH 8.8

Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-105518
HIGH 8.8

Windows iSCSI Remote Code Execution Vulnerability

CVE-2026-105534
HIGH 8.8

Windows Storage Remote Code Execution Vulnerability

CVE-2026-105542
HIGH 8.8

Windows NTFS Remote Code Execution Vulnerability

CVE-2026-105581
HIGH 8.8

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-108401
HIGH 8.8

Remote Desktop Services Remote Code Execution Vulnerability

CVE-2026-108411
HIGH 8.8

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2026-112762
HIGH 8.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-113760
HIGH 8.8

Windows XWizard Framework Elevation of Privilege Vulnerability

CVE-2026-113814
HIGH 8.8

Windows Storage Spaces Controller Remote Code Execution Vulnerability

CVE-2026-118141
HIGH 8.8

Windows Client for NFS Remote Code Execution Vulnerability

CVE-2026-118146
CRITICAL 8.8

Windows Active Directory Domain Services Remote Code Execution Vulnerability

CVE-2026-119392
HIGH 8.8

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-119824
HIGH 8.8

Remote Desktop Client Tampering Vulnerability

CVE-2026-119839
HIGH 8.8

Windows Remote Desktop Client Elevation of Privilege Vulnerability

CVE-2026-119862
HIGH 8.8

Windows Input System Elevation of Privilege Vulnerability

CVE-2026-119881
HIGH 8.8

Microsoft XPS Document Converter Elevation of Privilege Vulnerability

CVE-2026-119908
HIGH 8.8

Windows Storage Spaces Controller Remote Code Execution Vulnerability

CVE-2026-119916
HIGH 8.8

Windows Input System Elevation of Privilege Vulnerability

CVE-2026-119925
HIGH 8.8

Windows Text Services Framework Elevation of Privilege Vulnerability

CVE-2026-119934
HIGH 8.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-119950
HIGH 8.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-119969
CRITICAL 8.8

Graphic Fonts Remote Code Execution Vulnerability

CVE-2026-122171
HIGH 8.8

Microsoft XPS Document Converter Remote Code Execution Vulnerability

CVE-2026-122176
HIGH 8.8

Windows SMB Remote Code Execution Vulnerability

CVE-2026-122475
HIGH 8.8

Windows Storage Spaces Controller Remote Code Execution Vulnerability

CVE-2026-88222
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability

CVE-2026-88229
HIGH 8.8

Windows Media Player Remote Code Execution Vulnerability

CVE-2026-88249
HIGH 8.8

Windows Client for NFS Remote Code Execution Vulnerability

CVE-2026-95975
HIGH 8.8

Windows Performance Counters Remote Code Execution Vulnerability

CVE-2026-96002
HIGH 8.8

Windows Domain Name Service Remote Code Execution Vulnerability

CVE-2026-96020
HIGH 8.8

Windows Domain Name Service Remote Code Execution Vulnerability

CVE-2026-96064
HIGH 8.8

Windows Domain Name Service Remote Code Execution Vulnerability

CVE-2026-96164
HIGH 8.8

Windows Imaging Component Remote Code Execution Vulnerability

CVE-2026-95885
HIGH 8.1

Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-102219
HIGH 8.1

Windows Modern Device Management (MDM) Remote Code Execution Vulnerability

CVE-2026-109459
CRITICAL 8.1

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

CVE-2026-113862
CRITICAL 8.1

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

CVE-2026-116710
CRITICAL 8.1

Windows Message Queuing Remote Code Execution Vulnerability

CVE-2026-118737
CRITICAL 8.1

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2026-119945
HIGH 8.1

Windows Modern Device Management (MDM) Remote Code Execution Vulnerability

CVE-2026-119951
CRITICAL 8.1

Windows Deployment Services Remote Code Execution Vulnerability

CVE-2026-119952
CRITICAL 8.1

Windows Schannel Remote Code Execution Vulnerability

CVE-2026-119961
CRITICAL 8.1

Windows Internet Information Services Remote Code Execution Vulnerability

CVE-2026-119962
CRITICAL 8.1

Windows CredSSP Remote Code Execution Vulnerability

CVE-2026-119963
CRITICAL 8.1

Windows Message Queuing Remote Code Execution Vulnerability

CVE-2026-119964
CRITICAL 8.1

Windows Message Queuing Remote Code Execution Vulnerability

CVE-2026-119967
CRITICAL 8.1

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

CVE-2026-72998
HIGH 8.1

Windows DHCP Server Remote Code Execution Vulnerability

CVE-2026-81384
HIGH 8.1

Windows DNS Server Remote Code Execution Vulnerability

CVE-2026-95956
HIGH 8.1

Windows eSCL Scanner Remote Code Execution Vulnerability

CVE-2026-96092
HIGH 8.1

Windows Domain Name Service Remote Code Execution Vulnerability

CVE-2026-96177
HIGH 8.1

Windows Domain Name Service Remote Code Execution Vulnerability

CVE-2026-96115
HIGH 8.0

Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-88240
HIGH 8.0

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-88187
HIGH 8.0

Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-123387
HIGH 8.0

Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an authorized attacker to elevate privil…

CVE-2026-122164
HIGH 8.0

Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

CVE-2026-97013
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-96184
HIGH 7.8

Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-96172
HIGH 7.8

No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96174
HIGH 7.8

Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96175
HIGH 7.8

Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96160
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96162
HIGH 7.8

Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally.

CVE-2026-96152
HIGH 7.8

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96126
HIGH 7.8

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96117
HIGH 7.8

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

CVE-2026-96122
HIGH 7.8

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96102
HIGH 7.8

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-96103
HIGH 7.8

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96085
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96084
HIGH 7.8

Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.

CVE-2026-96074
HIGH 7.8

Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96076
HIGH 7.8

Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.

CVE-2026-96062
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96066
HIGH 7.8

Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96056
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96057
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96060
HIGH 7.8

Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96052
HIGH 7.8

Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96053
HIGH 7.8

Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileg…

CVE-2026-96055
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96036
HIGH 7.8

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96037
HIGH 7.8

Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96038
HIGH 7.8

Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96028
HIGH 7.8

Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96029
HIGH 7.8

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96031
HIGH 7.8

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96023
HIGH 7.8

Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.

CVE-2026-96005
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96016
HIGH 7.8

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-95997
HIGH 7.8

Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

CVE-2026-95999
HIGH 7.8

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95991
HIGH 7.8

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95983
HIGH 7.8

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95965
HIGH 7.8

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95963
HIGH 7.8

Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

CVE-2026-95953
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95947
HIGH 7.8

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of…

CVE-2026-95948
HIGH 7.8

Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95951
HIGH 7.8

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-95934
HIGH 7.8

Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

CVE-2026-95935
HIGH 7.8

Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95942
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95920
HIGH 7.8

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-95932
HIGH 7.8

Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95933
HIGH 7.8

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-95909
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95898
HIGH 7.8

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.

CVE-2026-95902
HIGH 7.8

Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95894
HIGH 7.8

Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-95895
HIGH 7.8

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95881
HIGH 7.8

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-95872
HIGH 7.8

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95874
HIGH 7.8

Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally.

CVE-2026-95879
HIGH 7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-94527
HIGH 7.8

Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

CVE-2026-94531
HIGH 7.8

Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.

CVE-2026-88245
HIGH 7.8

Missing authentication for critical function in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2026-88241
HIGH 7.8

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88233
HIGH 7.8

Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-88238
HIGH 7.8

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-88230
HIGH 7.8

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

CVE-2026-88232
HIGH 7.8

Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-88227
HIGH 7.8

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88213
HIGH 7.8

Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85929
HIGH 7.8

Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2026-85942
HIGH 7.8

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-85801
HIGH 7.8

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83563
HIGH 7.8

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

CVE-2026-125137
HIGH 7.8

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-123388
HIGH 7.8

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-122984
HIGH 7.8

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-122183
HIGH 7.8

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-122172
HIGH 7.8

Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.

CVE-2026-122165
HIGH 7.8

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

CVE-2026-122166
HIGH 7.8

Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-122168
HIGH 7.8

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-121681
HIGH 7.8

Heap-based buffer overflow in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.

CVE-2026-121673
HIGH 7.8

Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-118137
HIGH 7.8

Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally.

CVE-2026-113843
HIGH 7.8

Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-100223
HIGH 7.8

Windows NTFS Elevation of Privilege Vulnerability

CVE-2026-105028
HIGH 7.8

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-105501
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-105503
HIGH 7.8

Windows Management Instrumentation Elevation of Privilege Vulnerability

CVE-2026-105505
HIGH 7.8

Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

CVE-2026-105507
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-105524
HIGH 7.8

Windows Management Instrumentation Elevation of Privilege Vulnerability

CVE-2026-105528
HIGH 7.8

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-105532
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-105541
HIGH 7.8

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-105543
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-105569
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-105575
HIGH 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-105580
HIGH 7.8

Windows Management Instrumentation Remote Code Execution Vulnerability

CVE-2026-108403
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-108405
HIGH 7.8

Windows CD-ROM Driver Elevation of Privilege Vulnerability

CVE-2026-108407
HIGH 7.8

Windows GDI Elevation of Privilege Vulnerability

CVE-2026-108412
HIGH 7.8

Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability

CVE-2026-109473
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-112743
HIGH 7.8

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-112751
HIGH 7.8

Windows Remote Assistance Elevation of Privilege Vulnerability

CVE-2026-112752
HIGH 7.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112758
HIGH 7.8

Windows Defender Firewall Service Elevation of Privilege Vulnerability

CVE-2026-112760
HIGH 7.8

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2026-112794
HIGH 7.8

Windows Smart Card Elevation of Privilege Vulnerability

CVE-2026-112799
HIGH 7.8

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-112801
HIGH 7.8

Windows eSCL Scanner Elevation of Privilege Vulnerability

CVE-2026-112802
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-112811
HIGH 7.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112978
HIGH 7.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112981
HIGH 7.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-113748
HIGH 7.8

Software Protection Platform (SPP) Elevation of Privilege Vulnerability

CVE-2026-113758
HIGH 7.8

Windows Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-113765
HIGH 7.8

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

CVE-2026-113767
HIGH 7.8

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVE-2026-113847
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-113848
HIGH 7.8

Windows NTFS Remote Code Execution Vulnerability

CVE-2026-113856
CRITICAL 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-113865
CRITICAL 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-118126
HIGH 7.8

Windows Message Queuing Elevation of Privilege Vulnerability

CVE-2026-118138
HIGH 7.8

Windows Client for NFS Elevation of Privilege Vulnerability

CVE-2026-118142
HIGH 7.8

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

CVE-2026-118220
HIGH 7.8

Windows Multiple Provider Router Elevation of Privilege Vulnerability

CVE-2026-119382
CRITICAL 7.8

Windows TPM Elevation of Privilege Vulnerability

CVE-2026-119390
HIGH 7.8

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-119391
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-119393
HIGH 7.8

Windows Credential Manager Elevation of Privilege Vulnerability

CVE-2026-119816
HIGH 7.8

Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability

CVE-2026-119817
HIGH 7.8

Windows Shell Elevation of Privilege Vulnerability

CVE-2026-119818
HIGH 7.8

Windows Text Services Framework Elevation of Privilege Vulnerability

CVE-2026-119821
HIGH 7.8

Windows Network Connection Broker Elevation of Privilege Vulnerability

CVE-2026-119826
HIGH 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-119834
HIGH 7.8

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVE-2026-119846
HIGH 7.8

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVE-2026-119847
HIGH 7.8

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2026-119853
HIGH 7.8

Remote Access API Elevation of Privilege Vulnerability

CVE-2026-119886
HIGH 7.8

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-119892
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119899
HIGH 7.8

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-119903
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119904
HIGH 7.8

Microsoft Windows Speech Elevation of Privilege Vulnerability

CVE-2026-119907
HIGH 7.8

Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability

CVE-2026-119917
HIGH 7.8

Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability

CVE-2026-119929
HIGH 7.8

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119933
HIGH 7.8

Windows NTFS Elevation of Privilege Vulnerability

CVE-2026-119939
HIGH 7.8

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-119941
HIGH 7.8

Volume Shadow Copy Elevation of Privilege Vulnerability

CVE-2026-119943
HIGH 7.8

Microsoft Windows Search Component Elevation of Privilege Vulnerability

CVE-2026-119953
HIGH 7.8

Windows DNS Elevation of Privilege Vulnerability

CVE-2026-119954
HIGH 7.8

Microsoft Windows Search Component Elevation of Privilege Vulnerability

CVE-2026-119957
CRITICAL 7.8

Windows Remote Desktop Services Elevation of Privilege Vulnerability

CVE-2026-95891
HIGH 7.8

Microsoft DirectMusic Remote Code Execution Vulnerability

CVE-2026-95896
HIGH 7.8

Microsoft DirectMusic Remote Code Execution Vulnerability

CVE-2026-97002
HIGH 7.5

Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.

CVE-2026-96972
HIGH 7.5

Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.

CVE-2026-96176
HIGH 7.5

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-96134
HIGH 7.5

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-96077
HIGH 7.5

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

CVE-2026-88236
HIGH 7.5

Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network.

CVE-2026-83684
HIGH 7.5

Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.

CVE-2026-80094
HIGH 7.5

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.

CVE-2026-70240
HIGH 7.5

Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.

CVE-2026-122177
HIGH 7.5

Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-122169
HIGH 7.5

Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally.

CVE-2026-121680
HIGH 7.5

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-105512
HIGH 7.5

Microsoft QUIC Denial of Service Vulnerability

CVE-2026-105515
HIGH 7.5

Windows Message Queuing Denial of Service Vulnerability

CVE-2026-105551
HIGH 7.5

Windows NetBIOS Elevation of Privilege Vulnerability

CVE-2026-105558
HIGH 7.5

Windows Deployment Services Remote Code Execution Vulnerability

CVE-2026-105561
HIGH 7.5

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

CVE-2026-105578
HIGH 7.5

Microsoft JScript Remote Code Execution Vulnerability

CVE-2026-105579
HIGH 7.5

Windows DNS Information Disclosure Vulnerability

CVE-2026-108421
HIGH 7.5

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

CVE-2026-112793
HIGH 7.5

Windows Event Collector Service Elevation of Privilege Vulnerability

CVE-2026-112966
HIGH 7.5

Windows Security Account Manager Denial of Service Vulnerability

CVE-2026-112972
HIGH 7.5

Windows SMBv3 Server Remote Code Execution Vulnerability

CVE-2026-112985
HIGH 7.5

Windows JScript Remote Code Execution Vulnerability

CVE-2026-113749
CRITICAL 7.5

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

CVE-2026-113752
CRITICAL 7.5

Windows Print Spooler Components Remote Code Execution Vulnerability

CVE-2026-113768
HIGH 7.5

Windows Performance Counters Remote Code Execution Vulnerability

CVE-2026-113825
CRITICAL 7.5

Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability

CVE-2026-113855
HIGH 7.5

Windows DNS Remote Code Execution Vulnerability

CVE-2026-113859
CRITICAL 7.5

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2026-113861
CRITICAL 7.5

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-116698
HIGH 7.5

Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability

CVE-2026-116706
HIGH 7.5

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

CVE-2026-118145
CRITICAL 7.5

Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability

CVE-2026-118148
CRITICAL 7.5

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2026-118735
HIGH 7.5

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2026-119837
HIGH 7.5

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-119858
HIGH 7.5

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-119880
HIGH 7.5

Microsoft XPS Document Converter Remote Code Execution Vulnerability

CVE-2026-119932
HIGH 7.5

Windows Remote Desktop Denial of Service Vulnerability

CVE-2026-119938
HIGH 7.5

Windows Shell Remote Code Execution Vulnerability

CVE-2026-119944
HIGH 7.5

Windows Mobile Device Management Elevation of Privilege Vulnerability

CVE-2026-119947
CRITICAL 7.5

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-119948
HIGH 7.5

Windows Active Directory Remote Code Execution Vulnerability

CVE-2026-119960
CRITICAL 7.5

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-119966
CRITICAL 7.5

Windows Graphics Kernel Elevation of Privilege Vulnerability

CVE-2026-122163
HIGH 7.5

Windows Image Acquisition Remote Code Execution Vulnerability

CVE-2026-125134
CRITICAL 7.5

Windows Function Discovery Resource Publication Remote Code Execution Vulnerability

CVE-2026-88212
HIGH 7.5

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

CVE-2026-88216
HIGH 7.5

Windows DHCP Server Remote Code Execution Vulnerability

CVE-2026-88244
HIGH 7.5

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

CVE-2026-95964
HIGH 7.5

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-96081
HIGH 7.5

Windows Rich Text Edit Control Remote Code Execution Vulnerability

CVE-2026-96993
HIGH 7.5

Windows Performance Monitor Remote Code Execution Vulnerability

CVE-2026-69327
HIGH 7.4

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2026-119900
HIGH 7.3

Windows NTFS Elevation of Privilege Vulnerability

CVE-2026-105520
HIGH 7.2

Windows DNS Elevation of Privilege Vulnerability

CVE-2026-105560
HIGH 7.2

Windows DHCP Server Remote Code Execution Vulnerability

CVE-2026-112973
HIGH 7.1

Windows Kernel Security Feature Bypass Vulnerability

CVE-2026-119988
HIGH 7.1

Windows SMB Remote Code Execution Vulnerability

CVE-2026-96994
HIGH 7.0

Use after free in Winsock allows an authorized attacker to elevate privileges locally.

CVE-2026-96978
HIGH 7.0

Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.

CVE-2026-96971
HIGH 7.0

Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

CVE-2026-96973
HIGH 7.0

Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96969
HIGH 7.0

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-96171
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96158
HIGH 7.0

Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96168
HIGH 7.0

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96153
HIGH 7.0

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-96155
HIGH 7.0

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96139
HIGH 7.0

Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-96124
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96088
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho…

CVE-2026-96075
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate pr…

CVE-2026-96061
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96072
HIGH 7.0

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

CVE-2026-96051
HIGH 7.0

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96042
HIGH 7.0

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96043
HIGH 7.0

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-96035
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96027
HIGH 7.0

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96019
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi…

CVE-2026-96007
HIGH 7.0

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-95987
HIGH 7.0

Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

CVE-2026-95989
HIGH 7.0

Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-95976
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic Policy Service allows an authorized attacker …

CVE-2026-95979
HIGH 7.0

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2026-95966
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95968
HIGH 7.0

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-95971
HIGH 7.0

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95973
HIGH 7.0

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95974
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95961
HIGH 7.0

Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-95950
HIGH 7.0

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95938
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95922
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95923
HIGH 7.0

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-95906
HIGH 7.0

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95888
HIGH 7.0

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-95876
HIGH 7.0

Use after free in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.

CVE-2026-94525
HIGH 7.0

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of…

CVE-2026-94514
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg…

CVE-2026-94519
HIGH 7.0

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-94522
HIGH 7.0

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-88242
HIGH 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-88237
HIGH 7.0

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-88228
HIGH 7.0

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-85862
HIGH 7.0

Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-70120
HIGH 7.0

Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70231
HIGH 7.0

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-123389
HIGH 7.0

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

CVE-2026-122182
HIGH 7.0

Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.

CVE-2026-122174
HIGH 7.0

Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-122179
HIGH 7.0

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

CVE-2026-122170
HIGH 7.0

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-121670
HIGH 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate …

CVE-2026-121671
HIGH 7.0

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-103571
HIGH 7.0

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2026-105017
HIGH 7.0

Volume Shadow Copy Elevation of Privilege Vulnerability

CVE-2026-105024
HIGH 7.0

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-105504
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-105510
HIGH 7.0

Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability

CVE-2026-105511
HIGH 7.0

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

CVE-2026-105513
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-105522
HIGH 7.0

Winlogon Elevation of Privilege Vulnerability

CVE-2026-105525
HIGH 7.0

Windows Network Connection Broker Elevation of Privilege Vulnerability

CVE-2026-105526
HIGH 7.0

Winsock Elevation of Privilege Vulnerability

CVE-2026-105529
HIGH 7.0

Windows Storage Elevation of Privilege Vulnerability

CVE-2026-105533
HIGH 7.0

Windows COM Elevation of Privilege Vulnerability

CVE-2026-105540
HIGH 7.0

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2026-105546
HIGH 7.0

Windows Management Instrumentation Elevation of Privilege Vulnerability

CVE-2026-105547
HIGH 7.0

Windows Setup and Deployment Elevation of Privilege Vulnerability

CVE-2026-105553
HIGH 7.0

Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability

CVE-2026-105554
HIGH 7.0

Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

CVE-2026-105566
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-105567
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-105582
HIGH 7.0

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-105583
HIGH 7.0

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-105586
HIGH 7.0

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

CVE-2026-105587
HIGH 7.0

Windows OLE DB Elevation of Privilege Vulnerability

CVE-2026-105589
HIGH 7.0

Windows Wireless Networking Elevation of Privilege Vulnerability

CVE-2026-108406
HIGH 7.0

Windows Network Connection Broker Elevation of Privilege Vulnerability

CVE-2026-108413
HIGH 7.0

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-108414
HIGH 7.0

Windows Projected File System Filter Driver Elevation of Privilege Vulnerability

CVE-2026-112756
HIGH 7.0

Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability

CVE-2026-112759
HIGH 7.0

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2026-112763
HIGH 7.0

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-112764
HIGH 7.0

Windows USB Driver Elevation of Privilege Vulnerability

CVE-2026-112765
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112766
HIGH 7.0

Windows exFAT File System Elevation of Privilege Vulnerability

CVE-2026-112790
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-112791
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112792
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112796
HIGH 7.0

Windows Event Collector Service Elevation of Privilege Vulnerability

CVE-2026-112797
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112798
HIGH 7.0

Windows NetBIOS Elevation of Privilege Vulnerability

CVE-2026-112804
HIGH 7.0

Windows exFAT File System Elevation of Privilege Vulnerability

CVE-2026-112810
HIGH 7.0

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-112812
HIGH 7.0

Windows SMB Client Elevation of Privilege Vulnerability

CVE-2026-112968
HIGH 7.0

Windows COM Elevation of Privilege Vulnerability

CVE-2026-112976
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-112986
HIGH 7.0

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-112987
HIGH 7.0

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

CVE-2026-112989
HIGH 7.0

Windows Servicing Stack Updates Elevation of Privilege Vulnerability

CVE-2026-113750
HIGH 7.0

Windows Device Inventory Elevation of Privilege Vulnerability

CVE-2026-113751
HIGH 7.0

Windows Fast FAT Driver Elevation of Privilege Vulnerability

CVE-2026-113755
HIGH 7.0

Windows Filter Manager Elevation of Privilege Vulnerability

CVE-2026-113769
HIGH 7.0

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVE-2026-113770
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-113819
HIGH 7.0

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-113820
HIGH 7.0

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

CVE-2026-113860
CRITICAL 7.0

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-116707
HIGH 7.0

Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability

CVE-2026-118123
HIGH 7.0

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

CVE-2026-118124
HIGH 7.0

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

CVE-2026-118125
HIGH 7.0

Windows Message Queuing Elevation of Privilege Vulnerability

CVE-2026-119386
HIGH 7.0

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVE-2026-119387
HIGH 7.0

Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability

CVE-2026-119388
HIGH 7.0

Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability

CVE-2026-119389
HIGH 7.0

Windows Storage Elevation of Privilege Vulnerability

CVE-2026-119397
HIGH 7.0

Windows Kernel Transaction Manager Elevation of Privilege Vulnerability

CVE-2026-119398
HIGH 7.0

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119399
HIGH 7.0

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119822
HIGH 7.0

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2026-119827
HIGH 7.0

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-119831
HIGH 7.0

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119833
HIGH 7.0

Windows Message Queuing Elevation of Privilege Vulnerability

CVE-2026-119835
HIGH 7.0

Windows Smart Card Elevation of Privilege Vulnerability

CVE-2026-119844
HIGH 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-119849
HIGH 7.0

Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability

CVE-2026-119851
HIGH 7.0

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-119859
HIGH 7.0

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

CVE-2026-119860
HIGH 7.0

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

CVE-2026-119861
HIGH 7.0

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

CVE-2026-119866
HIGH 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-119868
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-119870
HIGH 7.0

Windows SMB Client Elevation of Privilege Vulnerability

CVE-2026-119873
HIGH 7.0

Windows NetBIOS Elevation of Privilege Vulnerability

CVE-2026-119874
HIGH 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-119876
HIGH 7.0

Windows USB Scanner Driver Elevation of Privilege Vulnerability

CVE-2026-119888
HIGH 7.0

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-119893
HIGH 7.0

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-119894
HIGH 7.0

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-119895
HIGH 7.0

Windows Audio Service Elevation of Privilege Vulnerability

CVE-2026-119898
HIGH 7.0

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2026-119913
HIGH 7.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-119919
HIGH 7.0

Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability

CVE-2026-119921
HIGH 7.0

Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability

CVE-2026-119928
HIGH 7.0

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2026-119931
HIGH 7.0

Windows Text Services Framework Elevation of Privilege Vulnerability

CVE-2026-119974
HIGH 7.0

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-119992
HIGH 7.0

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2026-69565
HIGH 7.0

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2026-96054
HIGH 7.0

Microsoft Color Management Remote Code Execution Vulnerability

CVE-2026-96982
MEDIUM 6.8

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96979
MEDIUM 6.8

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96974
MEDIUM 6.8

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-95905
MEDIUM 6.8

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-125135
MEDIUM 6.8

Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-122173
MEDIUM 6.8

Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-122167
MEDIUM 6.8

Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-108404
HIGH 6.8

Windows CD-ROM Driver Remote Code Execution Vulnerability

CVE-2026-108415
HIGH 6.8

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

CVE-2026-108416
HIGH 6.8

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

CVE-2026-112755
HIGH 6.8

Windows RNDIS Elevation of Privilege Vulnerability

CVE-2026-118143
HIGH 6.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-119823
HIGH 6.8

Windows Storport Miniport Driver Remote Code Execution Vulnerability

CVE-2026-119829
HIGH 6.8

Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

CVE-2026-119830
HIGH 6.8

Windows Storport Miniport Driver Elevation of Privilege Vulnerability

CVE-2026-119884
HIGH 6.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-119885
HIGH 6.8

Windows Storport Miniport Driver Elevation of Privilege Vulnerability

CVE-2026-119918
HIGH 6.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-119935
HIGH 6.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-96179
MEDIUM 6.7

Use after free in DNS Server allows an authorized attacker to elevate privileges locally.

CVE-2026-95910
MEDIUM 6.7

Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.

CVE-2026-112980
HIGH 6.7

Windows Print Spooler Components Elevation of Privilege Vulnerability

CVE-2026-119852
HIGH 6.7

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-119912
HIGH 6.7

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-119914
HIGH 6.7

Windows Setup and Deployment Elevation of Privilege Vulnerability

CVE-2026-95889
MEDIUM 6.6

Untrusted pointer dereference in Windows Storage allows an authorized attacker to elevate privileges with a physical attack.

CVE-2026-105018
HIGH 6.6

Windows Partition Management Driver Elevation of Privilege Vulnerability

CVE-2026-112969
HIGH 6.6

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-112984
HIGH 6.6

Windows USB Video Driver Elevation of Privilege Vulnerability

CVE-2026-118144
HIGH 6.6

Windows Smart Card Elevation of Privilege Vulnerability

CVE-2026-119383
HIGH 6.6

Windows Smart Card Elevation of Privilege Vulnerability

CVE-2026-119394
HIGH 6.6

Windows Enhanced Storage Remote Code Execution Vulnerability

CVE-2026-119937
HIGH 6.6

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2026-96086
MEDIUM 6.5

Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.

CVE-2026-96082
MEDIUM 6.5

Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

CVE-2026-96018
MEDIUM 6.5

Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally.

CVE-2026-105559
HIGH 6.5

Windows Active Directory Denial of Service Vulnerability

CVE-2026-105568
HIGH 6.5

Windows Active Directory Domain Services Denial of Service Vulnerability

CVE-2026-108417
HIGH 6.5

Windows Remote Desktop Client Information Disclosure Vulnerability

CVE-2026-108418
HIGH 6.5

Windows Remote Desktop Client Information Disclosure Vulnerability

CVE-2026-108419
HIGH 6.5

Windows Remote Desktop Client Information Disclosure Vulnerability

CVE-2026-108424
HIGH 6.5

Windows GDI Information Disclosure Vulnerability

CVE-2026-112795
HIGH 6.5

Windows Security Account Manager Denial of Service Vulnerability

CVE-2026-112807
HIGH 6.5

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

CVE-2026-112808
HIGH 6.5

Windows Print Spooler Components Information Disclosure Vulnerability

CVE-2026-113818
HIGH 6.5

Windows Deployment Services Information Disclosure Vulnerability

CVE-2026-116699
HIGH 6.5

Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability

CVE-2026-119396
HIGH 6.5

Windows Remote Access API Tampering Vulnerability

CVE-2026-119887
HIGH 6.5

Windows Installer Information Disclosure Vulnerability

CVE-2026-119940
HIGH 6.5

Windows Kerberos Denial of Service Vulnerability

CVE-2026-96992
MEDIUM 6.4

Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96981
MEDIUM 6.4

Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-88215
MEDIUM 6.4

Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.

CVE-2026-105588
HIGH 6.4

Windows DHCP Server Elevation of Privilege Vulnerability

CVE-2026-113864
CRITICAL 6.4

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-119869
HIGH 6.4

Windows Failover Cluster Elevation of Privilege Vulnerability

CVE-2026-119871
HIGH 6.4

Windows IP Translation Configuration Service Elevation of Privilege Vulnerability

CVE-2026-119965
HIGH 6.4

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-113763
HIGH 6.3

Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability

CVE-2026-119840
HIGH 6.3

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-112757
HIGH 6.0

Windows Secure Kernel Mode Information Disclosure Vulnerability

CVE-2026-119955
HIGH 6.0

Windows Hyper-V Denial of Service Vulnerability

CVE-2026-96975
MEDIUM 5.9

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

CVE-2026-95913
MEDIUM 5.9

Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network.

CVE-2026-122474
MEDIUM 5.9

Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a netwo…

CVE-2026-119832
MEDIUM 5.9

Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack.

CVE-2026-105557
HIGH 5.9

Windows DHCP Server Information Disclosure Vulnerability

CVE-2026-108425
HIGH 5.9

Windows DNS Information Disclosure Vulnerability

CVE-2026-116697
HIGH 5.9

Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability

CVE-2026-118213
HIGH 5.9

Windows Deployment Services Information Disclosure Vulnerability

CVE-2026-119404
HIGH 5.9

Windows Client for NFS Security Feature Bypass Vulnerability

CVE-2026-119909
HIGH 5.9

Windows Internet Information Services Denial of Service Vulnerability

CVE-2026-119936
HIGH 5.9

Windows Internet Information Services Denial of Service Vulnerability

CVE-2026-119946
HIGH 5.9

HTTP.sys Information Disclosure Vulnerability

CVE-2026-119972
HIGH 5.9

Remote Procedure Call Denial of Service Vulnerability

CVE-2026-88231
MEDIUM 5.7

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network.

CVE-2026-88211
MEDIUM 5.7

Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network.

CVE-2026-96150
MEDIUM 5.6

Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.

CVE-2026-96022
MEDIUM 5.6

Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.

CVE-2026-96989
MEDIUM 5.5

Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.

CVE-2026-96156
MEDIUM 5.5

Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.

CVE-2026-96137
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information loc…

CVE-2026-96133
MEDIUM 5.5

Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-96112
MEDIUM 5.5

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.

CVE-2026-96101
MEDIUM 5.5

Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information l…

CVE-2026-96110
MEDIUM 5.5

Use after free in Windows OLE allows an authorized attacker to disclose information locally.

CVE-2026-96059
MEDIUM 5.5

Use after free in HID class driver allows an authorized attacker to disclose information locally.

CVE-2026-96041
MEDIUM 5.5

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.

CVE-2026-96001
MEDIUM 5.5

Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information l…

CVE-2026-95977
MEDIUM 5.5

Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally.

CVE-2026-95944
MEDIUM 5.5

Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally.

CVE-2026-95946
MEDIUM 5.5

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-95908
MEDIUM 5.5

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information locally.

CVE-2026-95893
MEDIUM 5.5

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-94517
MEDIUM 5.5

Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.

CVE-2026-88247
MEDIUM 5.5

Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.

CVE-2026-88220
MEDIUM 5.5

Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.

CVE-2026-88217
MEDIUM 5.5

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-122297
MEDIUM 5.5

Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.

CVE-2026-122162
MEDIUM 5.5

Integer underflow (wrap or wraparound) in Windows Update Stack allows an authorized attacker to disclose information locally.

CVE-2026-113757
MEDIUM 5.5

Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.

CVE-2026-112803
MEDIUM 5.5

Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.

CVE-2026-105527
HIGH 5.5

Windows Encrypting File System (EFS) Denial of Service Vulnerability

CVE-2026-105530
HIGH 5.5

Windows System Events Broker Information Disclosure Vulnerability

CVE-2026-105531
HIGH 5.5

Windows Print Spooler Components Information Disclosure Vulnerability

CVE-2026-105537
HIGH 5.5

Mailslot File System Information Disclosure Vulnerability

CVE-2026-105552
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2026-105584
HIGH 5.5

Windows Inventory Backup Information Disclosure Vulnerability

CVE-2026-108408
HIGH 5.5

Windows Telephony Service Information Disclosure Vulnerability

CVE-2026-108409
HIGH 5.5

Windows Overlay Filter Information Disclosure Vulnerability

CVE-2026-108410
HIGH 5.5

Windows Management Instrumentation Information Disclosure Vulnerability

CVE-2026-112750
HIGH 5.5

Windows Overlay Filter Information Disclosure Vulnerability

CVE-2026-112754
HIGH 5.5

Microsoft Graphics Component Information Disclosure Vulnerability

CVE-2026-112814
HIGH 5.5

Windows Management Instrumentation Elevation of Privilege Vulnerability

CVE-2026-112965
HIGH 5.5

Windows Management Instrumentation Information Disclosure Vulnerability

CVE-2026-112974
HIGH 5.5

Microsoft Account Tampering Vulnerability

CVE-2026-112977
HIGH 5.5

Windows Deployment Services Information Disclosure Vulnerability

CVE-2026-112979
HIGH 5.5

Windows State Repository Service Tampering Vulnerability

CVE-2026-112982
HIGH 5.5

Microsoft Account Tampering Vulnerability

CVE-2026-112988
HIGH 5.5

Windows Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-113844
HIGH 5.5

Windows NTFS Tampering Vulnerability

CVE-2026-118140
HIGH 5.5

Server for NFS Information Disclosure Vulnerability

CVE-2026-118736
HIGH 5.5

Windows Network File System Information Disclosure Vulnerability

CVE-2026-119825
HIGH 5.5

Win32k Information Disclosure Vulnerability

CVE-2026-119855
HIGH 5.5

Windows COM+ Event System Service Information Disclosure Vulnerability

CVE-2026-119856
HIGH 5.5

Win32k Information Disclosure Vulnerability

CVE-2026-119857
HIGH 5.5

Windows Kernel Information Disclosure Vulnerability

CVE-2026-96983
MEDIUM 5.3

Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.

CVE-2026-96965
MEDIUM 5.3

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

CVE-2026-95884
MEDIUM 5.3

Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information over a network.

CVE-2026-113773
MEDIUM 5.3

Improper access control in Windows DHCP Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-113756
MEDIUM 5.3

Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.

CVE-2026-105492
HIGH 5.3

Microsoft Remote Registry Service Denial of Service Vulnerability

CVE-2026-105590
HIGH 5.3

Windows Active Directory Certificate Services Security Feature Bypass

CVE-2026-108402
HIGH 5.3

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

CVE-2026-112975
HIGH 5.3

Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability

CVE-2026-119848
HIGH 5.3

Windows Message Queuing Denial of Service Vulnerability

CVE-2026-119867
HIGH 5.3

Windows Installer Security Feature Bypass Vulnerability

CVE-2026-119882
HIGH 5.3

Windows Remote Desktop Services Information Disclosure Vulnerability

CVE-2026-119890
HIGH 5.3

Windows DHCP Server Denial of Service Vulnerability

CVE-2026-119959
HIGH 5.3

Windows Hyper-V Spoofing Vulnerability

CVE-2026-105506
HIGH 5.0

Windows Shell Information Disclosure Vulnerability

CVE-2026-97006
MEDIUM 4.9

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

CVE-2026-96988
MEDIUM 4.9

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

CVE-2026-96984
MEDIUM 4.9

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

CVE-2026-96985
MEDIUM 4.9

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

CVE-2026-96986
MEDIUM 4.9

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

CVE-2026-96987
MEDIUM 4.9

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

CVE-2026-96976
MEDIUM 4.9

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

CVE-2026-96980
MEDIUM 4.9

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

CVE-2026-96970
MEDIUM 4.9

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

CVE-2026-96017
MEDIUM 4.9

Use after free in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-119905
HIGH 4.9

Windows DNS Spoofing Vulnerability

CVE-2026-119970
HIGH 4.9

Windows DNS Information Disclosure Vulnerability

CVE-2026-119971
HIGH 4.9

Windows DNS Server Information Disclosure Vulnerability

CVE-2026-96144
MEDIUM 4.7

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-96093
MEDIUM 4.7

Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.

CVE-2026-96048
MEDIUM 4.7

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-113754
MEDIUM 4.7

Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.

CVE-2026-102200
HIGH 4.7

Windows NTFS Tampering Vulnerability

CVE-2026-108423
HIGH 4.7

Windows WinHTTP Information Disclosure Vulnerability

CVE-2026-112789
HIGH 4.7

Windows Installer Information Disclosure Vulnerability

CVE-2026-112806
HIGH 4.7

Windows Print Spooler Components Information Disclosure Vulnerability

CVE-2026-112813
HIGH 4.7

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2026-112990
HIGH 4.7

Windows USB Video Driver Elevation of Privilege Vulnerability

CVE-2026-113764
HIGH 4.7

Windows Projected File System Information Disclosure Vulnerability

CVE-2026-113772
HIGH 4.7

Windows Redirected Drive Buffering Information Disclosure Vulnerability

CVE-2026-113815
HIGH 4.7

Microsoft PowerShell Security Feature Bypass Vulnerability

CVE-2026-119385
HIGH 4.7

Windows Hyper-V Denial of Service Vulnerability

CVE-2026-119836
HIGH 4.7

Windows Management Services Information Disclosure Vulnerability

CVE-2026-119838
HIGH 4.7

Windows Installer Information Disclosure Vulnerability

CVE-2026-119841
HIGH 4.7

Windows Graphics Kernel Information Disclosure Vulnerability

CVE-2026-119910
HIGH 4.7

Win32k Information Disclosure Vulnerability

CVE-2026-119942
HIGH 4.7

HTTP.sys Information Disclosure Vulnerability

CVE-2026-96058
MEDIUM 4.6

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-95998
MEDIUM 4.4

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform tampering locally.

CVE-2026-85907
MEDIUM 4.4

Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

CVE-2026-105549
HIGH 4.3

Windows Smart Card Information Disclosure Vulnerability

CVE-2026-113816
HIGH 4.1

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability

CVE-2026-113821
HIGH 4.1

Microsoft Windows SCSI Class System File Information Disclosure Vulnerability

CVE-2026-119395
HIGH 4.0

Storport.sys Driver Information Disclosure Vulnerability

CVE-2026-119875
HIGH 4.0

Windows Storport Miniport Driver Information Disclosure Vulnerability

CVE-2026-119883
LOW 3.3

Improper authorization in Data Deduplication allows an authorized attacker to bypass a security feature locally.

CVE-2026-113766
HIGH 3.3

Windows Language Experience Service Tampering Vulnerability

Vous déployez le build 10.0.26100.33822 sur votre parc ?

Appaloosa pousse mises à jour Windows, apps et politiques depuis une seule console.

Voir le MDM Windows