Windows · Build corrective · Tous les builds Windows
La build Windows 10.0.17763.9487, publiée le 2026-11-10, corrige 575 CVE, déployée sur 3 SKU.
- Publiée le
- 2026-11-10
- SKU couvertes
- 3
- CVE corrigées
- 575
- KEV CISA
- 0
38 critique · 474 élevé
SKU Windows couvertes par cette build
Les SKU ci-dessous partagent ce numéro de build MSRC. Pousser la KB correspondante les sécurise toutes simultanément.
CVE corrigées par cette build
| CVE |
|---|
|
CVE-2026-96157
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96078
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96067
CRITICAL 9.8
Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95901
CRITICAL 9.8
Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95882
CRITICAL 9.8
Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88243
CRITICAL 9.8
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88234
CRITICAL 9.8
Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88218
CRITICAL 9.8
Double free in Windows DNS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85844
CRITICAL 9.8
Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-119958
CRITICAL 9.8
Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-116928
CRITICAL 9.8
Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-112967
CRITICAL 9.8
Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95962
HIGH 9.0
Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability |
|
CVE-2026-96010
HIGH 8.8
Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-95996
HIGH 8.8
Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-124226
HIGH 8.8
Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-105518
HIGH 8.8
Windows iSCSI Remote Code Execution Vulnerability |
|
CVE-2026-105534
HIGH 8.8
Windows Storage Remote Code Execution Vulnerability |
|
CVE-2026-105542
HIGH 8.8
Windows NTFS Remote Code Execution Vulnerability |
|
CVE-2026-108401
HIGH 8.8
Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2026-108411
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2026-112762
HIGH 8.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-113760
HIGH 8.8
Windows XWizard Framework Elevation of Privilege Vulnerability |
|
CVE-2026-118141
HIGH 8.8
Windows Client for NFS Remote Code Execution Vulnerability |
|
CVE-2026-118146
CRITICAL 8.8
Windows Active Directory Domain Services Remote Code Execution Vulnerability |
|
CVE-2026-119392
HIGH 8.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-119824
HIGH 8.8
Remote Desktop Client Tampering Vulnerability |
|
CVE-2026-119862
HIGH 8.8
Windows Input System Elevation of Privilege Vulnerability |
|
CVE-2026-119881
HIGH 8.8
Microsoft XPS Document Converter Elevation of Privilege Vulnerability |
|
CVE-2026-119916
HIGH 8.8
Windows Input System Elevation of Privilege Vulnerability |
|
CVE-2026-119925
HIGH 8.8
Windows Text Services Framework Elevation of Privilege Vulnerability |
|
CVE-2026-119934
HIGH 8.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-119950
HIGH 8.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119969
CRITICAL 8.8
Graphic Fonts Remote Code Execution Vulnerability |
|
CVE-2026-122171
HIGH 8.8
Microsoft XPS Document Converter Remote Code Execution Vulnerability |
|
CVE-2026-122176
HIGH 8.8
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2026-125136
CRITICAL 8.8
Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability |
|
CVE-2026-88222
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-88229
HIGH 8.8
Windows Media Player Remote Code Execution Vulnerability |
|
CVE-2026-88249
HIGH 8.8
Windows Client for NFS Remote Code Execution Vulnerability |
|
CVE-2026-95975
HIGH 8.8
Windows Performance Counters Remote Code Execution Vulnerability |
|
CVE-2026-96002
HIGH 8.8
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2026-96020
HIGH 8.8
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2026-96064
HIGH 8.8
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2026-96164
HIGH 8.8
Windows Imaging Component Remote Code Execution Vulnerability |
|
CVE-2026-95885
HIGH 8.1
Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-102219
HIGH 8.1
Windows Modern Device Management (MDM) Remote Code Execution Vulnerability |
|
CVE-2026-109459
CRITICAL 8.1
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
|
CVE-2026-113862
CRITICAL 8.1
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
|
CVE-2026-116710
CRITICAL 8.1
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-118737
CRITICAL 8.1
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2026-119951
CRITICAL 8.1
Windows Deployment Services Remote Code Execution Vulnerability |
|
CVE-2026-119952
CRITICAL 8.1
Windows Schannel Remote Code Execution Vulnerability |
|
CVE-2026-119961
CRITICAL 8.1
Windows Internet Information Services Remote Code Execution Vulnerability |
|
CVE-2026-119962
CRITICAL 8.1
Windows CredSSP Remote Code Execution Vulnerability |
|
CVE-2026-119963
CRITICAL 8.1
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-119964
CRITICAL 8.1
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-119967
CRITICAL 8.1
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
|
CVE-2026-72998
HIGH 8.1
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2026-88240
HIGH 8.0
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-88187
HIGH 8.0
Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-123387
HIGH 8.0
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an authorized attacker to elevate privil… |
|
CVE-2026-122164
HIGH 8.0
Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-97013
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96184
HIGH 7.8
Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96172
HIGH 7.8
No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96174
HIGH 7.8
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96175
HIGH 7.8
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96160
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96162
HIGH 7.8
Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96152
HIGH 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96126
HIGH 7.8
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96117
HIGH 7.8
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96122
HIGH 7.8
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96102
HIGH 7.8
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96085
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96074
HIGH 7.8
Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96076
HIGH 7.8
Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96062
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96066
HIGH 7.8
Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96056
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96057
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96060
HIGH 7.8
Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96053
HIGH 7.8
Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileg… |
|
CVE-2026-96055
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96036
HIGH 7.8
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96037
HIGH 7.8
Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96038
HIGH 7.8
Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96028
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96029
HIGH 7.8
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96031
HIGH 7.8
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96023
HIGH 7.8
Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96005
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95997
HIGH 7.8
Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95999
HIGH 7.8
Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95991
HIGH 7.8
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95983
HIGH 7.8
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95965
HIGH 7.8
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95963
HIGH 7.8
Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95953
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95947
HIGH 7.8
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of… |
|
CVE-2026-95948
HIGH 7.8
Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95951
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95934
HIGH 7.8
Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95935
HIGH 7.8
Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95942
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95920
HIGH 7.8
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95932
HIGH 7.8
Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95933
HIGH 7.8
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95909
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95898
HIGH 7.8
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95902
HIGH 7.8
Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95894
HIGH 7.8
Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95895
HIGH 7.8
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95881
HIGH 7.8
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95872
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95874
HIGH 7.8
Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95879
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94527
HIGH 7.8
Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94531
HIGH 7.8
Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88241
HIGH 7.8
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88233
HIGH 7.8
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88235
HIGH 7.8
Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88230
HIGH 7.8
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88227
HIGH 7.8
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88213
HIGH 7.8
Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85942
HIGH 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85801
HIGH 7.8
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-125137
HIGH 7.8
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-123388
HIGH 7.8
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122984
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122183
HIGH 7.8
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122172
HIGH 7.8
Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122165
HIGH 7.8
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122166
HIGH 7.8
Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122168
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-121673
HIGH 7.8
Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-118137
HIGH 7.8
Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-113843
HIGH 7.8
Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100223
HIGH 7.8
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2026-105028
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-105501
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105503
HIGH 7.8
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-105505
HIGH 7.8
Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability |
|
CVE-2026-105507
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105524
HIGH 7.8
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-105532
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105541
HIGH 7.8
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-105543
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105569
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-105575
HIGH 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105580
HIGH 7.8
Windows Management Instrumentation Remote Code Execution Vulnerability |
|
CVE-2026-108403
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-108405
HIGH 7.8
Windows CD-ROM Driver Elevation of Privilege Vulnerability |
|
CVE-2026-108407
HIGH 7.8
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2026-108412
HIGH 7.8
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability |
|
CVE-2026-109473
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112743
HIGH 7.8
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-112751
HIGH 7.8
Windows Remote Assistance Elevation of Privilege Vulnerability |
|
CVE-2026-112752
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112758
HIGH 7.8
Windows Defender Firewall Service Elevation of Privilege Vulnerability |
|
CVE-2026-112760
HIGH 7.8
Windows Overlay Filter Elevation of Privilege Vulnerability |
|
CVE-2026-112794
HIGH 7.8
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-112799
HIGH 7.8
Windows Projected File System Elevation of Privilege Vulnerability |
|
CVE-2026-112802
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112811
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112978
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112981
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-113748
HIGH 7.8
Software Protection Platform (SPP) Elevation of Privilege Vulnerability |
|
CVE-2026-113758
HIGH 7.8
Windows Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113765
HIGH 7.8
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2026-113767
HIGH 7.8
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
|
CVE-2026-113847
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-113848
HIGH 7.8
Windows NTFS Remote Code Execution Vulnerability |
|
CVE-2026-118126
HIGH 7.8
Windows Message Queuing Elevation of Privilege Vulnerability |
|
CVE-2026-118138
HIGH 7.8
Windows Client for NFS Elevation of Privilege Vulnerability |
|
CVE-2026-118220
HIGH 7.8
Windows Multiple Provider Router Elevation of Privilege Vulnerability |
|
CVE-2026-119382
CRITICAL 7.8
Windows TPM Elevation of Privilege Vulnerability |
|
CVE-2026-119390
HIGH 7.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-119393
HIGH 7.8
Windows Credential Manager Elevation of Privilege Vulnerability |
|
CVE-2026-119816
HIGH 7.8
Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability |
|
CVE-2026-119817
HIGH 7.8
Windows Shell Elevation of Privilege Vulnerability |
|
CVE-2026-119818
HIGH 7.8
Windows Text Services Framework Elevation of Privilege Vulnerability |
|
CVE-2026-119821
HIGH 7.8
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2026-119834
HIGH 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2026-119846
HIGH 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2026-119847
HIGH 7.8
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2026-119853
HIGH 7.8
Remote Access API Elevation of Privilege Vulnerability |
|
CVE-2026-119886
HIGH 7.8
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-119892
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119899
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-119903
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119904
HIGH 7.8
Microsoft Windows Speech Elevation of Privilege Vulnerability |
|
CVE-2026-119907
HIGH 7.8
Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability |
|
CVE-2026-119917
HIGH 7.8
Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability |
|
CVE-2026-119929
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119933
HIGH 7.8
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2026-119939
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119941
HIGH 7.8
Volume Shadow Copy Elevation of Privilege Vulnerability |
|
CVE-2026-119953
HIGH 7.8
Windows DNS Elevation of Privilege Vulnerability |
|
CVE-2026-119954
HIGH 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
|
CVE-2026-119957
CRITICAL 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2026-124225
HIGH 7.8
Windows PowerShell Remote Code Execution Vulnerability |
|
CVE-2026-95891
HIGH 7.8
Microsoft DirectMusic Remote Code Execution Vulnerability |
|
CVE-2026-95896
HIGH 7.8
Microsoft DirectMusic Remote Code Execution Vulnerability |
|
CVE-2026-97002
HIGH 7.5
Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96972
HIGH 7.5
Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-96134
HIGH 7.5
Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96077
HIGH 7.5
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83684
HIGH 7.5
Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-80094
HIGH 7.5
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-70240
HIGH 7.5
Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-122177
HIGH 7.5
Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-122169
HIGH 7.5
Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-121680
HIGH 7.5
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-105515
HIGH 7.5
Windows Message Queuing Denial of Service Vulnerability |
|
CVE-2026-105551
HIGH 7.5
Windows NetBIOS Elevation of Privilege Vulnerability |
|
CVE-2026-105558
HIGH 7.5
Windows Deployment Services Remote Code Execution Vulnerability |
|
CVE-2026-105561
HIGH 7.5
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
|
CVE-2026-105578
HIGH 7.5
Microsoft JScript Remote Code Execution Vulnerability |
|
CVE-2026-105579
HIGH 7.5
Windows DNS Information Disclosure Vulnerability |
|
CVE-2026-108421
HIGH 7.5
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2026-112793
HIGH 7.5
Windows Event Collector Service Elevation of Privilege Vulnerability |
|
CVE-2026-112966
HIGH 7.5
Windows Security Account Manager Denial of Service Vulnerability |
|
CVE-2026-112972
HIGH 7.5
Windows SMBv3 Server Remote Code Execution Vulnerability |
|
CVE-2026-112985
HIGH 7.5
Windows JScript Remote Code Execution Vulnerability |
|
CVE-2026-113749
CRITICAL 7.5
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2026-113752
CRITICAL 7.5
Windows Print Spooler Components Remote Code Execution Vulnerability |
|
CVE-2026-113768
HIGH 7.5
Windows Performance Counters Remote Code Execution Vulnerability |
|
CVE-2026-113825
CRITICAL 7.5
Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability |
|
CVE-2026-113861
CRITICAL 7.5
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-116698
HIGH 7.5
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-116706
HIGH 7.5
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
|
CVE-2026-118145
CRITICAL 7.5
Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability |
|
CVE-2026-118148
CRITICAL 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2026-118735
HIGH 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2026-119837
HIGH 7.5
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
|
CVE-2026-119858
HIGH 7.5
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-119880
HIGH 7.5
Microsoft XPS Document Converter Remote Code Execution Vulnerability |
|
CVE-2026-119932
HIGH 7.5
Windows Remote Desktop Denial of Service Vulnerability |
|
CVE-2026-119938
HIGH 7.5
Windows Shell Remote Code Execution Vulnerability |
|
CVE-2026-119944
HIGH 7.5
Windows Mobile Device Management Elevation of Privilege Vulnerability |
|
CVE-2026-119947
CRITICAL 7.5
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119948
HIGH 7.5
Windows Active Directory Remote Code Execution Vulnerability |
|
CVE-2026-122163
HIGH 7.5
Windows Image Acquisition Remote Code Execution Vulnerability |
|
CVE-2026-125134
CRITICAL 7.5
Windows Function Discovery Resource Publication Remote Code Execution Vulnerability |
|
CVE-2026-88212
HIGH 7.5
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
|
CVE-2026-88216
HIGH 7.5
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2026-88244
HIGH 7.5
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
|
CVE-2026-95964
HIGH 7.5
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-96081
HIGH 7.5
Windows Rich Text Edit Control Remote Code Execution Vulnerability |
|
CVE-2026-96993
HIGH 7.5
Windows Performance Monitor Remote Code Execution Vulnerability |
|
CVE-2026-69327
HIGH 7.4
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2026-119900
HIGH 7.3
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2026-105520
HIGH 7.2
Windows DNS Elevation of Privilege Vulnerability |
|
CVE-2026-105560
HIGH 7.2
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2026-112973
HIGH 7.1
Windows Kernel Security Feature Bypass Vulnerability |
|
CVE-2026-119988
HIGH 7.1
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2026-96994
HIGH 7.0
Use after free in Winsock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96978
HIGH 7.0
Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96971
HIGH 7.0
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96973
HIGH 7.0
Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96171
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96158
HIGH 7.0
Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96168
HIGH 7.0
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96153
HIGH 7.0
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96155
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96139
HIGH 7.0
Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96124
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96107
HIGH 7.0
Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96061
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96072
HIGH 7.0
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96051
HIGH 7.0
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96042
HIGH 7.0
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96043
HIGH 7.0
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96035
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96027
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96019
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
|
CVE-2026-96007
HIGH 7.0
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95987
HIGH 7.0
Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95989
HIGH 7.0
Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95966
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95968
HIGH 7.0
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95971
HIGH 7.0
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95973
HIGH 7.0
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95974
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95961
HIGH 7.0
Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95950
HIGH 7.0
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95938
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95922
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95923
HIGH 7.0
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95906
HIGH 7.0
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95888
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95876
HIGH 7.0
Use after free in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95871
HIGH 7.0
Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94525
HIGH 7.0
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of… |
|
CVE-2026-94529
HIGH 7.0
Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94514
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
|
CVE-2026-94522
HIGH 7.0
Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88242
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88228
HIGH 7.0
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88224
HIGH 7.0
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88221
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85862
HIGH 7.0
Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70120
HIGH 7.0
Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70231
HIGH 7.0
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-124224
HIGH 7.0
Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-123389
HIGH 7.0
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122182
HIGH 7.0
Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122174
HIGH 7.0
Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122179
HIGH 7.0
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122170
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-121670
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate … |
|
CVE-2026-103571
HIGH 7.0
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
|
CVE-2026-105017
HIGH 7.0
Volume Shadow Copy Elevation of Privilege Vulnerability |
|
CVE-2026-105024
HIGH 7.0
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-105504
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105510
HIGH 7.0
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability |
|
CVE-2026-105511
HIGH 7.0
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
|
CVE-2026-105513
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105522
HIGH 7.0
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2026-105525
HIGH 7.0
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2026-105526
HIGH 7.0
Winsock Elevation of Privilege Vulnerability |
|
CVE-2026-105529
HIGH 7.0
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2026-105533
HIGH 7.0
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2026-105540
HIGH 7.0
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2026-105546
HIGH 7.0
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-105547
HIGH 7.0
Windows Setup and Deployment Elevation of Privilege Vulnerability |
|
CVE-2026-105553
HIGH 7.0
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability |
|
CVE-2026-105554
HIGH 7.0
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability |
|
CVE-2026-105566
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105582
HIGH 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105583
HIGH 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105586
HIGH 7.0
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
|
CVE-2026-105587
HIGH 7.0
Windows OLE DB Elevation of Privilege Vulnerability |
|
CVE-2026-105589
HIGH 7.0
Windows Wireless Networking Elevation of Privilege Vulnerability |
|
CVE-2026-108406
HIGH 7.0
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2026-108413
HIGH 7.0
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-108414
HIGH 7.0
Windows Projected File System Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112756
HIGH 7.0
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability |
|
CVE-2026-112759
HIGH 7.0
Windows Task Scheduler Elevation of Privilege Vulnerability |
|
CVE-2026-112761
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2026-112763
HIGH 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112764
HIGH 7.0
Windows USB Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112765
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112766
HIGH 7.0
Windows exFAT File System Elevation of Privilege Vulnerability |
|
CVE-2026-112790
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112791
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112792
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112796
HIGH 7.0
Windows Event Collector Service Elevation of Privilege Vulnerability |
|
CVE-2026-112797
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112798
HIGH 7.0
Windows NetBIOS Elevation of Privilege Vulnerability |
|
CVE-2026-112800
HIGH 7.0
Windows Diagnostic Policy Service Elevation of Privilege Vulnerability |
|
CVE-2026-112804
HIGH 7.0
Windows exFAT File System Elevation of Privilege Vulnerability |
|
CVE-2026-112810
HIGH 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112812
HIGH 7.0
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2026-112968
HIGH 7.0
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2026-112976
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112986
HIGH 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-112987
HIGH 7.0
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
|
CVE-2026-113750
HIGH 7.0
Windows Device Inventory Elevation of Privilege Vulnerability |
|
CVE-2026-113751
HIGH 7.0
Windows Fast FAT Driver Elevation of Privilege Vulnerability |
|
CVE-2026-113755
HIGH 7.0
Windows Filter Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113762
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2026-113769
HIGH 7.0
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
|
CVE-2026-113820
HIGH 7.0
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
|
CVE-2026-113842
HIGH 7.0
Windows Security Center Elevation of Privilege Vulnerability |
|
CVE-2026-113860
CRITICAL 7.0
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-116707
HIGH 7.0
Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability |
|
CVE-2026-118123
HIGH 7.0
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
|
CVE-2026-118124
HIGH 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-118125
HIGH 7.0
Windows Message Queuing Elevation of Privilege Vulnerability |
|
CVE-2026-119387
HIGH 7.0
Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability |
|
CVE-2026-119388
HIGH 7.0
Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability |
|
CVE-2026-119397
HIGH 7.0
Windows Kernel Transaction Manager Elevation of Privilege Vulnerability |
|
CVE-2026-119398
HIGH 7.0
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119399
HIGH 7.0
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119401
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2026-119402
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2026-119403
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2026-119822
HIGH 7.0
Windows Overlay Filter Elevation of Privilege Vulnerability |
|
CVE-2026-119827
HIGH 7.0
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-119831
HIGH 7.0
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119833
HIGH 7.0
Windows Message Queuing Elevation of Privilege Vulnerability |
|
CVE-2026-119835
HIGH 7.0
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-119849
HIGH 7.0
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability |
|
CVE-2026-119851
HIGH 7.0
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-119860
HIGH 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-119861
HIGH 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-119868
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119870
HIGH 7.0
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2026-119873
HIGH 7.0
Windows NetBIOS Elevation of Privilege Vulnerability |
|
CVE-2026-119876
HIGH 7.0
Windows USB Scanner Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119888
HIGH 7.0
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-119913
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119919
HIGH 7.0
Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability |
|
CVE-2026-119921
HIGH 7.0
Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability |
|
CVE-2026-119928
HIGH 7.0
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2026-119931
HIGH 7.0
Windows Text Services Framework Elevation of Privilege Vulnerability |
|
CVE-2026-119974
HIGH 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119992
HIGH 7.0
Windows HTTP.sys Elevation of Privilege Vulnerability |
|
CVE-2026-69565
HIGH 7.0
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2026-96054
HIGH 7.0
Microsoft Color Management Remote Code Execution Vulnerability |
|
CVE-2026-96982
MEDIUM 6.8
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-96979
MEDIUM 6.8
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-96974
MEDIUM 6.8
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-95905
MEDIUM 6.8
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-125135
MEDIUM 6.8
Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-122173
MEDIUM 6.8
Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-122167
MEDIUM 6.8
Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-108404
HIGH 6.8
Windows CD-ROM Driver Remote Code Execution Vulnerability |
|
CVE-2026-108415
HIGH 6.8
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2026-108416
HIGH 6.8
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2026-112755
HIGH 6.8
Windows RNDIS Elevation of Privilege Vulnerability |
|
CVE-2026-118143
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119823
HIGH 6.8
Windows Storport Miniport Driver Remote Code Execution Vulnerability |
|
CVE-2026-119829
HIGH 6.8
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
|
CVE-2026-119830
HIGH 6.8
Windows Storport Miniport Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119884
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119885
HIGH 6.8
Windows Storport Miniport Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119918
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119935
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-96179
MEDIUM 6.7
Use after free in DNS Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95910
MEDIUM 6.7
Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-112980
HIGH 6.7
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119852
HIGH 6.7
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119912
HIGH 6.7
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119914
HIGH 6.7
Windows Setup and Deployment Elevation of Privilege Vulnerability |
|
CVE-2026-95889
MEDIUM 6.6
Untrusted pointer dereference in Windows Storage allows an authorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-105018
HIGH 6.6
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112969
HIGH 6.6
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112984
HIGH 6.6
Windows USB Video Driver Elevation of Privilege Vulnerability |
|
CVE-2026-113817
HIGH 6.6
Windows Devices Human Interface Elevation of Privilege Vulnerability |
|
CVE-2026-116700
HIGH 6.6
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-118144
HIGH 6.6
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-119383
HIGH 6.6
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-119394
HIGH 6.6
Windows Enhanced Storage Remote Code Execution Vulnerability |
|
CVE-2026-119937
HIGH 6.6
Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
|
CVE-2026-96082
MEDIUM 6.5
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. |
|
CVE-2026-96018
MEDIUM 6.5
Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally. |
|
CVE-2026-105559
HIGH 6.5
Windows Active Directory Denial of Service Vulnerability |
|
CVE-2026-105568
HIGH 6.5
Windows Active Directory Domain Services Denial of Service Vulnerability |
|
CVE-2026-108417
HIGH 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108418
HIGH 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108419
HIGH 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108424
HIGH 6.5
Windows GDI Information Disclosure Vulnerability |
|
CVE-2026-112795
HIGH 6.5
Windows Security Account Manager Denial of Service Vulnerability |
|
CVE-2026-112807
HIGH 6.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
|
CVE-2026-112808
HIGH 6.5
Windows Print Spooler Components Information Disclosure Vulnerability |
|
CVE-2026-113818
HIGH 6.5
Windows Deployment Services Information Disclosure Vulnerability |
|
CVE-2026-116699
HIGH 6.5
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-119396
HIGH 6.5
Windows Remote Access API Tampering Vulnerability |
|
CVE-2026-119887
HIGH 6.5
Windows Installer Information Disclosure Vulnerability |
|
CVE-2026-119889
HIGH 6.5
ActiveSyncProvider Information Disclosure Vulnerability |
|
CVE-2026-119940
HIGH 6.5
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2026-96981
MEDIUM 6.4
Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-88215
MEDIUM 6.4
Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-105588
HIGH 6.4
Windows DHCP Server Elevation of Privilege Vulnerability |
|
CVE-2026-113864
CRITICAL 6.4
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119869
HIGH 6.4
Windows Failover Cluster Elevation of Privilege Vulnerability |
|
CVE-2026-119871
HIGH 6.4
Windows IP Translation Configuration Service Elevation of Privilege Vulnerability |
|
CVE-2026-113763
HIGH 6.3
Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability |
|
CVE-2026-119840
HIGH 6.3
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
|
CVE-2026-112757
HIGH 6.0
Windows Secure Kernel Mode Information Disclosure Vulnerability |
|
CVE-2026-96975
MEDIUM 5.9
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-95913
MEDIUM 5.9
Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-122474
MEDIUM 5.9
Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a netwo… |
|
CVE-2026-119832
MEDIUM 5.9
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack. |
|
CVE-2026-105557
HIGH 5.9
Windows DHCP Server Information Disclosure Vulnerability |
|
CVE-2026-108425
HIGH 5.9
Windows DNS Information Disclosure Vulnerability |
|
CVE-2026-116697
HIGH 5.9
Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability |
|
CVE-2026-118213
HIGH 5.9
Windows Deployment Services Information Disclosure Vulnerability |
|
CVE-2026-119404
HIGH 5.9
Windows Client for NFS Security Feature Bypass Vulnerability |
|
CVE-2026-119909
HIGH 5.9
Windows Internet Information Services Denial of Service Vulnerability |
|
CVE-2026-119936
HIGH 5.9
Windows Internet Information Services Denial of Service Vulnerability |
|
CVE-2026-119946
HIGH 5.9
HTTP.sys Information Disclosure Vulnerability |
|
CVE-2026-119972
HIGH 5.9
Remote Procedure Call Denial of Service Vulnerability |
|
CVE-2026-88231
MEDIUM 5.7
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network. |
|
CVE-2026-88211
MEDIUM 5.7
Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96150
MEDIUM 5.6
Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-96022
MEDIUM 5.6
Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally. |
|
CVE-2026-96989
MEDIUM 5.5
Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally. |
|
CVE-2026-96156
MEDIUM 5.5
Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-96133
MEDIUM 5.5
Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-96112
MEDIUM 5.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally. |
|
CVE-2026-96110
MEDIUM 5.5
Use after free in Windows OLE allows an authorized attacker to disclose information locally. |
|
CVE-2026-96059
MEDIUM 5.5
Use after free in HID class driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96041
MEDIUM 5.5
Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96001
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information l… |
|
CVE-2026-95977
MEDIUM 5.5
Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally. |
|
CVE-2026-95944
MEDIUM 5.5
Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally. |
|
CVE-2026-95893
MEDIUM 5.5
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-94517
MEDIUM 5.5
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-88247
MEDIUM 5.5
Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-88220
MEDIUM 5.5
Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally. |
|
CVE-2026-88217
MEDIUM 5.5
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-122297
MEDIUM 5.5
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-113757
MEDIUM 5.5
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-112803
MEDIUM 5.5
Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-105527
HIGH 5.5
Windows Encrypting File System (EFS) Denial of Service Vulnerability |
|
CVE-2026-105530
HIGH 5.5
Windows System Events Broker Information Disclosure Vulnerability |
|
CVE-2026-105531
HIGH 5.5
Windows Print Spooler Components Information Disclosure Vulnerability |
|
CVE-2026-105537
HIGH 5.5
Mailslot File System Information Disclosure Vulnerability |
|
CVE-2026-105552
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2026-108408
HIGH 5.5
Windows Telephony Service Information Disclosure Vulnerability |
|
CVE-2026-108409
HIGH 5.5
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2026-108410
HIGH 5.5
Windows Management Instrumentation Information Disclosure Vulnerability |
|
CVE-2026-112750
HIGH 5.5
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2026-112754
HIGH 5.5
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2026-112814
HIGH 5.5
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-112965
HIGH 5.5
Windows Management Instrumentation Information Disclosure Vulnerability |
|
CVE-2026-112974
HIGH 5.5
Microsoft Account Tampering Vulnerability |
|
CVE-2026-112977
HIGH 5.5
Windows Deployment Services Information Disclosure Vulnerability |
|
CVE-2026-112979
HIGH 5.5
Windows State Repository Service Tampering Vulnerability |
|
CVE-2026-112982
HIGH 5.5
Microsoft Account Tampering Vulnerability |
|
CVE-2026-112988
HIGH 5.5
Windows Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113844
HIGH 5.5
Windows NTFS Tampering Vulnerability |
|
CVE-2026-118140
HIGH 5.5
Server for NFS Information Disclosure Vulnerability |
|
CVE-2026-118736
HIGH 5.5
Windows Network File System Information Disclosure Vulnerability |
|
CVE-2026-119825
HIGH 5.5
Win32k Information Disclosure Vulnerability |
|
CVE-2026-119855
HIGH 5.5
Windows COM+ Event System Service Information Disclosure Vulnerability |
|
CVE-2026-119856
HIGH 5.5
Win32k Information Disclosure Vulnerability |
|
CVE-2026-96983
MEDIUM 5.3
Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network. |
|
CVE-2026-96965
MEDIUM 5.3
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
|
CVE-2026-95884
MEDIUM 5.3
Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information over a network. |
|
CVE-2026-113773
MEDIUM 5.3
Improper access control in Windows DHCP Server allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-113756
MEDIUM 5.3
Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network. |
|
CVE-2026-105492
HIGH 5.3
Microsoft Remote Registry Service Denial of Service Vulnerability |
|
CVE-2026-105590
HIGH 5.3
Windows Active Directory Certificate Services Security Feature Bypass |
|
CVE-2026-108402
HIGH 5.3
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
|
CVE-2026-112975
HIGH 5.3
Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability |
|
CVE-2026-119848
HIGH 5.3
Windows Message Queuing Denial of Service Vulnerability |
|
CVE-2026-119867
HIGH 5.3
Windows Installer Security Feature Bypass Vulnerability |
|
CVE-2026-119882
HIGH 5.3
Windows Remote Desktop Services Information Disclosure Vulnerability |
|
CVE-2026-119890
HIGH 5.3
Windows DHCP Server Denial of Service Vulnerability |
|
CVE-2026-119959
HIGH 5.3
Windows Hyper-V Spoofing Vulnerability |
|
CVE-2026-105506
HIGH 5.0
Windows Shell Information Disclosure Vulnerability |
|
CVE-2026-97006
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96988
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96984
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96985
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96986
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96987
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96976
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96980
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96970
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96017
MEDIUM 4.9
Use after free in DNS Server allows an authorized attacker to deny service over a network. |
|
CVE-2026-119905
HIGH 4.9
Windows DNS Spoofing Vulnerability |
|
CVE-2026-119970
HIGH 4.9
Windows DNS Information Disclosure Vulnerability |
|
CVE-2026-119971
HIGH 4.9
Windows DNS Server Information Disclosure Vulnerability |
|
CVE-2026-96144
MEDIUM 4.7
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-96093
MEDIUM 4.7
Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally. |
|
CVE-2026-96048
MEDIUM 4.7
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-113754
MEDIUM 4.7
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-102200
HIGH 4.7
Windows NTFS Tampering Vulnerability |
|
CVE-2026-108423
HIGH 4.7
Windows WinHTTP Information Disclosure Vulnerability |
|
CVE-2026-112789
HIGH 4.7
Windows Installer Information Disclosure Vulnerability |
|
CVE-2026-112806
HIGH 4.7
Windows Print Spooler Components Information Disclosure Vulnerability |
|
CVE-2026-112813
HIGH 4.7
Windows Overlay Filter Elevation of Privilege Vulnerability |
|
CVE-2026-112990
HIGH 4.7
Windows USB Video Driver Elevation of Privilege Vulnerability |
|
CVE-2026-113764
HIGH 4.7
Windows Projected File System Information Disclosure Vulnerability |
|
CVE-2026-113772
HIGH 4.7
Windows Redirected Drive Buffering Information Disclosure Vulnerability |
|
CVE-2026-113815
HIGH 4.7
Microsoft PowerShell Security Feature Bypass Vulnerability |
|
CVE-2026-119385
HIGH 4.7
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2026-119838
HIGH 4.7
Windows Installer Information Disclosure Vulnerability |
|
CVE-2026-119841
HIGH 4.7
Windows Graphics Kernel Information Disclosure Vulnerability |
|
CVE-2026-119910
HIGH 4.7
Win32k Information Disclosure Vulnerability |
|
CVE-2026-119942
HIGH 4.7
HTTP.sys Information Disclosure Vulnerability |
|
CVE-2026-96058
MEDIUM 4.6
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-95998
MEDIUM 4.4
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform tampering locally. |
|
CVE-2026-85907
MEDIUM 4.4
Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-105549
HIGH 4.3
Windows Smart Card Information Disclosure Vulnerability |
|
CVE-2026-113816
HIGH 4.1
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability |
|
CVE-2026-113821
HIGH 4.1
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability |
|
CVE-2026-119883
LOW 3.3
Improper authorization in Data Deduplication allows an authorized attacker to bypass a security feature locally. |
Vous déployez le build 10.0.17763.9487 sur votre parc ?
Appaloosa pousse mises à jour Windows, apps et politiques depuis une seule console.